dsh-plugin-health-check：装 DSH 插件前，在真实 profile 上做一次只读体检
dsh-plugin-health-check 是 GlariaLuminous 发布的 DSH 只读体检插件（admin-security）。它在真实 profile 上按官方 Cordis 算法合成 bundle 与 patch，静态检查版本兼容、patch 覆盖与 MCP serverName 冲突，支持 --candidate 安装前模拟且不改动配置。可通过 dsh plugin add 安装后由 agent 调用 plugin_health_check，或用 Node 22+ 运行 dsh_health_check.mjs。实验性项目，已在 DSH Desktop 0.2.1-rc.2 验证 CLI；STATIC PASS 不等于运行时成功。
Read Moredsh-trust-check: Static Capability Disclosure of the DeepSeek Harness Plugin
`dsh-trust-check` is a static plugin audit tool for DeepSeek Harness (DSH). It analyzes plugin source code to statically disclose capability surfaces (e.g., read/write, network), injection surfaces, and provenance surfaces, providing file line numbers and source excerpts as evidence, without consuming tokens and without issuing a “secure” conclusion. The tool supports both Web UI and CLI modes (including CI gates) and returns three verdicts: Red, Requires Confirmation, and No Risk. Core features include detecting high-confidence risks such as installation scripts, core bundle overwrites, credential reads, and plaintext HTTP connections outside the internal network. The plugin exports a stable API for integrators to quickly screen plugins before installation.
Read Moredsh-plugin-doctor: Do a health check before installing the DSH plugin
dsh-plugin-doctor is an open-source DSH plugin health check tool maintained by lin-cheng-lab (MIT license), designed to address installation risks caused by release candidate (rc) version mismatches within the DSH plugin ecosystem. It registers as a DSH tool, enabling a quick health check with a single command before plugin installation, without requiring additional scripts or permissions. The health check comprises five checks: local environment version baseline, repository accessibility, bundle declaration, peer dependency compatibility with local versions (the core check, correctly handling prerelease rules), and whether build artifacts are committed. The results are categorized into three levels—ok, warn, and danger—and include a structured JSON report along with handling suggestions. Installation is supported via GitHub (not yet released) or local source code, with profi needing to be restarted after installation.
Read More@swell05/dsh-whale-tank: DSH Plugin Development Sandbox and Third-Party Plugin Health Check
`@swell05/dsh-whale-tank` is a plugin development sandbox auxiliary tool within the DSH ecosystem, designed to address local development configuration pollution and security concerns regarding third-party plugins. This tool establishes an isolated sandbox by segregating `DSH_HOME`, offering plugin initialization, building, insertion/removal testing, and restoration capabilities, along with an incrementally mergeable development knowledge package. The core component, `.wttools`, is a zero-dependency single-file utility that supports state inspection, dependency management, plugin integration, and sandbox reset operations. Additionally, its `vet` feature conducts a three-phase health check on third-party npm plugins (static hazard detection, dynamic verification, and LLM review), generating security reports to aid decision-making. Users are required to install this plugin in a Node 20+ environment and initialize projects via `/whale-tank-init` or
Read More