dsh-stability-audit

Integrating community plugins into a DeepSeek Harness tool chain introduces real risks: a misconfigured hook can cripple the entire system, a startup scan can freeze the event loop, and unmet dependencies can cause silent failures. dsh-stability-audit is built to proactively surface these threats before they materialize. It's not just an installer; it's a static analysis engine codified from actual production incidents (like the barricade hook conflict or codegraph freeze), designed to assess a plugin's "blast radius" on your harness.

Its core capability is a clear, evidence-based risk grading system. For each plugin, it assigns a 🔴 (high-risk) / 🟡 (medium-risk) / 🟢 (normal) stability grade, supported by specific diagnostic signals—such as "top-level synchronous scan at startup" or "undeclared entry imports"—and actionable 🔧 fix suggestions. The audit can be performed via a fast static scan of the plugin's code and manifest, or through an optional isolated installation verification, which spins up a temporary DSH_HOME to test install and boot without touching your live environment. Results are output as a human-readable Markdown report or a structured JSON schema for programmatic use by other agents.

Essentially, this plugin shifts the conversation from "it seems to work" to "here is the factual risk profile" before you decide to install or keep a plugin. It is ideal for DSH system administrators, security and reliability engineers, and any user responsible for the health of their tool chain. If you manage a suite of plugins, curate extensions for a team, or simply want to avoid the pitfalls of trial-and-error installation, this tool provides the critical assessment needed to maintain a stable and efficient environment.