Write a plugin to check hashes from Debian CD downloads
This would be a good start to get into plugins...
At https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/ the checksums for all ISO files are in one file. A PGP signature exists for this file, so after verification we can rely on the checksums.