deepseekplugins

DeepSeek Harness plugin

dsh-plugin-auditor

DSH 插件审核器：在新插件加入 profile 前扫描组合兼容性——重复工具注册、entry id 冲突、peer 版本不匹配、记忆插件唯一性、渠道插件凭据，输出风险报告，预防启动崩溃。

Tools & Capabilities
Jump to install

Source facts

Repository
HYY-King/dsh-plugin-auditor
Latest update
Aug 14, 2026
Category
Tools & Capabilities
GitHub stars
2
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/HYY-King/dsh-plugin-auditor
Plugin: dsh-plugin-auditor
Author: HYY-King

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-plugin-auditor

Audit your DSH plugin combination before adding a new one — predict whether it will crash the harness on boot.

DeepSeek Harness loads every bundle in the profile at startup. Third-party plugins that are unconfigured or conflicting (duplicate tool registrations, entry-id collisions, peer version mismatches, missing tokens/app ids) can fail the whole plugin tree. This plugin turns those lessons into a read-only pre-flight check.

Install

# from git
dsh plugin --profile web add github:HYY-King/dsh-plugin-auditor

# or from a local directory (development)
dsh plugin --profile web add D:\path\dsh-plugin-auditor

# restart dsh web to activate

Usage

After restart, ask the agent to call the audit_plugins tool:

  • Full audit: call with no arguments to scan every bundle in the current profile.
  • New-plugin preview: pass newPlugins: ["package-name"] for a name-level conflict preview.

Checks

CheckWhat it catches
Duplicate tool registrationTwo plugins registering the same tool name (e.g. two memory plugins both registering memory_forget)
Entry-id collisionMultiple bundles mounting the same id in cordis.patch.yml
Peer version mismatchA plugin requiring a @deepseek-ai/* version that differs from the installed one
Memory-plugin uniquenessMore than one memory plugin enabled at once — keep exactly one
Channel-plugin credentialstelegram/lark/im-style plugins enabled without token/app id — disable or configure

How it works

  • Read-only: inspects the profile's package.json, cordis.patch.yml, and each installed package under node_modules; never executes audited plugin code.
  • Zero-dependency: a mini YAML parser tailored to the simple cordis.patch.yml shape.

Disclaimer

The audit is a static heuristic signal, not a compatibility guarantee. Always review a third-party plugin's source, permissions, and license before installing.

License

MIT

Back to searchOpen GitHub repository

More related plugins

View category