A fourth shop window off the same `skills/superdesign/` tree. dsh reads no
`plugin.json`: it installs an npm package whose `package.json` declares
`dsh.bundle`, pointing at a config layer that mounts a `ctx.skills` provider.
dsh plugin --profile <name> add github:superdesigndev/superdesign-skill
Two choices are load-bearing. The bundle is plain ESM with no build step,
because a git install fetches sources rather than build output and a `prepare`
script would force every user to allowlist a build before their first install
works. And it depends on no `@deepseek-ai/*` package, because an out-of-tree
bundle pulling an in-box one installs a second copy that drifts from the host's
- so it implements the `list`/`get` provider contract directly instead of
reusing `dsh-skill-filesystem`. The skill description is parsed out of SKILL.md
at runtime, so there is no second copy to keep in sync.
Verified against `@deepseek-ai/dsh@0.1.0-rc.6`: `dsh plugin add` appends the
bundle to the profile, `--dump-config` shows the `# == superdesign-dsh` layer,
and the package resolves from the profile and returns a valid candidate.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsD1EYGHk1an8DLL1yrzqK
shehjad-dev