No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by PKUfudawei · MCP Server · ★ 86
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is dsh-capability-menu safe to install? View the security audit →
dsh-capability-menu 为 DeepSeek Harness 统一管理 Tools 和 Skills 的暴露水平（上下文占用大小）与执行方式 <img src="https://img.shie
| Stars | 86 |
| Forks | 3 |
| Language | TypeScript |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 66.0206763651768/100 |
| Last Updated | 2026-09-21 |
| Created | 2026-08-19 |
| Platforms | mcp, node |
| Est. Tokens | ~16k |
These tools work well together with dsh-capability-menu for enhanced workflows:
Looking for a dsh-capability-menu alternative? If you're comparing dsh-capability-menu with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
MCP management console for the official DeepSeek Harness MCP client: /mcp command with health diagnostics and
Reverse engineer anything with agents, from app behavior down to native binaries.
Task-aware reasoning-mode router for DeepSeek Harness: three measured behavior bands (spec/mixed/react) with p
Composable mathematics tools for agents
Runtime evidence that helps agents trace, profile, and burn down hotspots in application and native code, GPU
You.com skills and plugins for web search, content extraction, research, finance, and integration discovery, h
Explore other popular mcp server tools:
dsh-capability-menu is 一个面向 DeepSeek Harness 的统一能力管理插件，为 Tools/Skills 提供常驻、按需、禁用三档暴露策略，以减少上下文占用并支持运行时动态发现与执行。. It is categorized as a MCP Server with 86 GitHub stars.
dsh-capability-menu is primarily written in TypeScript. It covers topics such as cordis, deepseek-harness, dsh-plugin.
You can find installation instructions and usage details in the dsh-capability-menu GitHub repository at github.com/PKUfudawei/dsh-capability-menu. The project has 86 stars and 3 forks, indicating an active community.
dsh-capability-menu is released under the Apache-2.0 license, making it free to use and modify according to the license terms.
The top alternatives to dsh-capability-menu on Agent Skills Hub include dsh-mcp-panel, rea, dsh-router-standard. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: