dsh-plugin-verify
安全与治理 活跃维护

dsh-plugin-verify

863683348/dsh-plugin-verify

支持代理声明的证据化校验并附源码行引用,可对JSON/YAML配置文件、HTTP链接、npm包及GitHub仓库做合规校验,自动生成提交就绪报告。

0
Stars 标星
0
Forks 分支
0
Watchers 关注
1
Open Issues
JavaScript
主要语言
MIT
开源协议
18 KB
仓库大小
1 个月前
最后推送
一键安装扩展 / 插件指令
dsh plugin --profile web add github:863683348/dsh-plugin-verify
git clone https://github.com/863683348/dsh-plugin-verify.git
git clone git@github.com:863683348/dsh-plugin-verify.git
README.md main

dsh-plugin-verify

Verification toolkit for DeepSeek Harness agents — evidence-based claim checking, config validation, and read-only network probes (URL / npm / GitHub).

Tools

Tool Mode What it does
verify claim Verify a statement against workspace files: keyword extraction, per-keyword hits with line-level citations, verdict verified / partial / unsupported
config Validate a config file — JSON strict parse or YAML structural smoke check
url HTTP(S) availability: status, redirect target, latency
npm Registry check: exists, latest version, dsh.bundle manifest, publish time
repo GitHub submission-readiness: exists, age, dsh-plugin topic, approximate commit count

Usage

verify claim "the plugin pins zod in dependencies"           # evidence search in workspace
verify claim "this repo has 12 commits" scope ./some-dir
verify config ./cordis.patch.yml
verify url https://example.com
verify npm dsh-plugin-focus
verify repo 863683348/dsh-plugin-gate

Notes

  • Read-only: never writes files, never executes scanned content.
  • Claim verification is a heuristic (keyword evidence), not proof — an unsupported verdict means "no evidence found", treat it as unconfirmed.
  • YAML check is a structural smoke check (balanced quotes/brackets, indentation), not a full YAML parser.

Development

node --check lib/*.js
node test/verify.test.mjs

License

MIT