aevral-plugin/plugin.json at main · better-isms/aevral-plugin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "aevral",
  "version": "0.2.3",
  "description": "Aevral is an AI security reviewer for GitHub pull requests. Setup skill for the Aevral GitHub App: reviews look for access control, business logic, injection, XSS, SSRF, path traversal, and LLM-integration flaws, with a suggested fix you apply. Public repos are free up to 500 reviews per organization per month.",
  "author": {
    "name": "Better ISMS",
    "email": "support@ismscopilot.com",
    "url": "https://aevral.com"
  },
  "homepage": "https://aevral.com",
  "repository": "https://github.com/better-isms/aevral-plugin",
  "license": "MIT",
  "keywords": [
    "aevral",
    "security",
    "code-review",
    "pull-request",
    "authorization",
    "idor",
    "github-app"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Aevral",
        "shortDescription": "AI security review for PRs",
        "longDescription": "Aevral is an AI security reviewer for GitHub pull requests. Each review looks for access control, business logic, injection, XSS, SSRF, path traversal, unsafe deserialization, token and session flaws, and LLM-integration risks, and posts each finding with a suggested fix you apply. This plugin is a setup skill: it walks you through installing the Aevral GitHub App so reviews run server-side. It does not review code on your machine. After the App is installed, the next pull request can already be reviewed, including before anyone signs in to the console. Reviews are advisory and never block a merge. The optional whole-repo scan reads authorization, IDOR, and business-logic access control only; it is not secret, dependency, or memory-corruption scanning, and not a general SAST. GitHub only. By Better ISMS.",
        "developerName": "Better ISMS",
        "category": "Developer Tools",
        "capabilities": [
          "Security review",
          "Pull request setup",
          "Whole-repo scan"
        ],
        "websiteURL": "https://aevral.com",
        "supportURL": "https://docs.aevral.com",
        "privacyPolicyURL": "https://trust.ismscopilot.com/en/privacy-policy",
        "termsOfServiceURL": "https://trust.ismscopilot.com/en/terms",
        "defaultPrompt": [
          "Set up Aevral security review on this repository.",
          "Install the Aevral GitHub App and get pull request security reviews.",
          "Start an Aevral scan of this repository and report the status."
        ],
        "logo": "./assets/logo.png"
      },
      "publication": {
        "release_notes": "OpenAI directory listing metadata: explicit interface text, short description within the 30-character limit, no plan pricing in the description, starter prompts, support URL, and logo."
      }
    }
  }
}