dsh-plugin-observatory：DSH 插件安装前审计与有界 Loader 观察
`dsh-plugin-observatory` 是由 CMSKL 维护的 DSH 只读审计插件，旨在为插件作者和维护者提供安装前的静态兼容性检查及激活后的有界生命周期观察。该插件包含两个核心工具：`plugin_audit` 用于审计本地插件包的 `package.json` 和 `dsh.bundle.patch`，检查版本范围、依赖声明、patch 结构及未求值表达式等，输出 `compatible`、`needs-review` 或 `incompatible` 的确定性机器可读报告；`plugin_observe` 则投影当前非 group Loader 条目，展示激活后的有界 ro
Read Moredsh-plugin-auditor：DSH 插件组合的只读预检
`dsh-plugin-auditor` 是一款面向 DeepSeek Harness (DSH) 的只读兼容性预检工具，旨在降低新增第三方插件后的启动风险。该插件通过扫描 `package.json`、`cordis.patch.yml` 及 `node_modules` 等文件，在不执行被审计插件代码的前提下，输出风险报告。其核心检查项包括：重复工具注册、entry ID 冲突、peer 依赖版本不一致、多个 memory 插件同时启用，以及 Telegram/Lark 等渠道插件缺失 Token 或 App ID 等凭据。用户可通过 `dsh plugin --profile [prof
Read Moredsh-plugin-doctor: DeepSeek Harness Plugin Health Check
dsh-plugin-doctor is a plugin health check tool in the DeepSeek Harness (DSH) ecosystem, corresponding to RFC #1629. It provides CLI and Agent-callable interfaces for verifying the integrity of manifest, patch, entry, build, pack, install, and config before plugin release. Core features include host masking, dependency, and native module checks against DSH profiles, as well as heuristic security audits (e.g., pre-side effects, Shell launcher risks). The tool supports read-only audit modes (audit/audit-batch), can generate JSON or Markdown reports, is suitable for CI integration, and offers environment diagnostics.
Read More