HYY-King/dsh-plugin-auditor
DSH插件审核器:为插件组合进行预检兼容性检查,预防启动崩溃。
项目介绍Project Overview
这是一个 DSH 插件审计工具,提供只读的启动前预检。它可扫描当前配置中的插件包,检测重复工具注册、entry-id 冲突、peer 版本不匹配、多个记忆插件及渠道插件缺少凭据等问题;也可在加入新插件前按包名预览冲突。适用于安装或调整第三方插件前排查会导致 harness 启动失败的配置问题。注意:结果是静态启发式信号,不代表兼容性保证。
This is a DSH plugin auditor that performs read-only pre-flight checks. It scans the current profile’s bundles for duplicate tool registrations, entry-id collisions, peer version mismatches, multiple memory plugins, and channel plugins missing credentials, and can preview conflicts for a new plugin by package name. Use it before installing or adjusting third-party plugins to catch issues that could break harness startup. The audit is a static heuristic, not a compatibility guarantee.
请帮我了解并安装插件:【dsh-plugin-auditor】【https://github.com/HYY-King/dsh-plugin-auditor】
把上面这条消息直接发给当前会话里的 DSH,让它帮你了解并安装。安装命令不一定准确,发给 DSH 更稳。Send this message to DSH in your current session. CLI install commands may not be accurate across systems — DSH will figure it out for you.
或使用命令行安装(适合开发者)Or use CLI install (for developers)
命令行安装CLI Install
dsh plugin --profile web add github:HYY-King/dsh-plugin-auditor
把 HYY-King/dsh-plugin-auditor 加入你的 DSH 配置(web profile)即可启用。
READMEREADME
dsh-plugin-auditor
Audit your DSH plugin combination before adding a new one — predict whether it will crash the harness on boot.
DeepSeek Harness loads every bundle in the profile at startup. Third-party plugins that are unconfigured or conflicting (duplicate tool registrations, entry-id collisions, peer version mismatches, missing tokens/app ids) can fail the whole plugin tree. This plugin turns those lessons into a read-only pre-flight check.
Install
# from git
dsh plugin --profile web add github:HYY-King/dsh-plugin-auditor
# or from a local directory (development)
dsh plugin --profile web add D:\path\dsh-plugin-auditor
# restart dsh web to activate
Usage
After restart, ask the agent to call the audit_plugins tool:
- Full audit: call with no arguments to scan every bundle in the current profile.
- New-plugin preview: pass
newPlugins: ["package-name"]for a name-level conflict preview.
Checks
| Check | What it catches |
|---|---|
| Duplicate tool registration | Two plugins registering the same tool name (e.g. two memory plugins both registering memory_forget) |
| Entry-id collision | Multiple bundles mounting the same id in cordis.patch.yml |
| Peer version mismatch | A plugin requiring a @deepseek-ai/* version that differs from the installed one |
| Memory-plugin uniqueness | More than one memory plugin enabled at once — keep exactly one |
| Channel-plugin credentials | telegram/lark/im-style plugins enabled without token/app id — disable or configure |
How it works
- Read-only: inspects the profile's
package.json,cordis.patch.yml, and each installed package under node_modules; never executes audited plugin code. - Zero-dependency: a mini YAML parser tailored to the simple
cordis.patch.ymlshape.
Disclaimer
The audit is a static heuristic signal, not a compatibility guarantee. Always review a third-party plugin's source, permissions, and license before installing.
License
MIT
nexu-io/open-design
freestylefly/awesome-gpt-image-2
anywhere-labs/dsh-desktop
walkinglabs/learn-harness-engineering
awesome-dsh-plugin/awesome-dsh-plugin
MemTensor/MemOS