{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"starfie1d1272-dsh-github-skills","slug":"starfie1d1272-dsh-github-skills","rank":561,"url":"https://github.com/Starfie1d1272/dsh-github-skills","name":"Starfie1d1272/dsh-github-skills","category":"git","description":{"zh":"四个面向 GitHub 工程工作流的 DSH Skill：PR 分诊、review 反馈、GitHub Actions 诊断和安全的 draft PR 发布；优先复用现有 DSH 能力，必要时回退到 gh/git。","en":"Four GitHub workflow skills for PR triage, review feedback, GitHub Actions diagnosis, and safe draft-PR publishing, reusing existing DSH capabilities with gh/git fallbacks."},"stars":4,"starsCheckedAt":"2026-08-21","repository":{"owner":"Starfie1d1272","repo":"dsh-github-skills","requestedRef":null,"subpath":""},"npm":"dsh-github-skills","downloads":832,"installMode":"npm","upstreamInstall":"dsh plugin --profile web add dsh-github-skills","tarball":null,"added":"2026-08-15","page":"https://awesome-dsh-plugin.com/p/Starfie1d1272/dsh-github-skills/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"starfie1d1272-dsh-github-skills","slug":"starfie1d1272-dsh-github-skills","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:26:14.085Z","scanStatus":"static-complete","verdict":"pass","score":99,"commit":"101d90ff3fb6e1185c1972859c50fc1e95c9e469","commitDate":"2026-08-19T15:54:24+08:00","artifactDigest":"sha256:4d297bcbea18f873dc7f05127888e92bb4e196b902127d45e4f45b2c90c8b58d","downloadUrl":"https://github.com/Starfie1d1272/dsh-github-skills/archive/101d90ff3fb6e1185c1972859c50fc1e95c9e469.tar.gz","installMode":"npm","installCommand":"dsh plugin --profile web add dsh-github-skills","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-github-skills","packageVersion":"0.2.1","bundle":{"patch":"./cordis.patch.yml"},"client":null,"lifecycleScripts":{},"peerDependencies":[]},"identity":{"status":"found","installMode":"npm","upstreamNpm":"dsh-github-skills","manifestName":"dsh-github-skills","nameMatch":true,"npm":{"name":"dsh-github-skills","latestVersion":"0.2.1","publishedAt":"2026-08-18T07:29:36.015Z","createdAt":"2026-08-15T15:42:46.315Z","versionCount":5,"maintainers":1,"repository":"git+https://github.com/Starfie1d1272/dsh-github-skills.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"match","provenance":"attested","tarballHost":null,"versionMatch":"match"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"dsh-github-skills","name":"dsh-github-skills","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":null,"parseErrors":[]},"capabilities":["browser-ui","filesystem","host-bundle","subprocess"],"outboundHosts":[{"host":"ci.example.com","count":1}],"findings":[{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/gh-address-comments/scripts/fetch-review-threads.mjs","pathClass":"source","line":37,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"232cb85c60f75f781d219d20"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/gh-address-comments/scripts/fetch-review-threads.mjs","pathClass":"source","line":37,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"3af2042c9fed99c3b06cb2c1"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/gh-fix-ci/scripts/inspect-pr-checks.mjs","pathClass":"source","line":35,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"07b3a875e43723b1a97bc0fd"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/gh-fix-ci/scripts/inspect-pr-checks.mjs","pathClass":"source","line":35,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"aefaf9c7165293d23c429641"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/gh-publish/scripts/publish-preflight.mjs","pathClass":"source","line":25,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"4b851dbecb6533255d9e05b6"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/gh-publish/scripts/publish-preflight.mjs","pathClass":"source","line":25,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"5795c9d02d7c50ef7f540b12"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/helpers.mjs","pathClass":"test-example-docs","line":10,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"3e0c3a803f74f384f89a8170"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/helpers.mjs","pathClass":"test-example-docs","line":10,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"e7b818d1e035dbe77f2e789b"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/install-smoke.mjs","pathClass":"test-example-docs","line":23,"evidence":"execFileSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"7bf713a4b4f0ad40dcfc5f0a"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/install-smoke.mjs","pathClass":"test-example-docs","line":23,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"0d2886a8173bd033aa8e92f7"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/package.test.mjs","pathClass":"test-example-docs","line":8,"evidence":"execFileSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"6b4a7a1588f54fe1826e12d0"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/package.test.mjs","pathClass":"test-example-docs","line":8,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"094f8df352a3a5bbec4f3405"}],"counts":{"critical":0,"high":0,"medium":0,"low":6},"rawCounts":{"critical":0,"high":0,"medium":0,"low":12},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":37,"bytesScanned":303355,"truncated":false,"lockfiles":[],"pathClasses":{"test-example-docs":12,"markdown":18,"cordis":1,"source":5,"manifest":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:26:14.085Z","commit":"101d90ff3fb6e1185c1972859c50fc1e95c9e469","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:29:18.370Z","commit":"101d90ff3fb6e1185c1972859c50fc1e95c9e469","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:58:25.237Z","commit":"101d90ff3fb6e1185c1972859c50fc1e95c9e469","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"101d90ff3fb6e1185c1972859c50fc1e95c9e469","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:26:14.085Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"101d90ff3fb6e1185c1972859c50fc1e95c9e469","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:29:18.370Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"101d90ff3fb6e1185c1972859c50fc1e95c9e469","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:58:25.237Z"}]}