Repository navigation
[External Plugin]: leoprevent #6247
Description
Plugin name
leoprevent
Short description
A Stop hook that has the Copilot agent review its own changes for security flaws and fix them before it finishes the turn. Requires a LeoTrace account. Each turn sends the changed code (the diff plus one hop of imported context), the prompt, and turn metadata including the developer's git name and email to the LeoTrace API for review; after a finding, the fix and the agent's reply are sent too. Secret files and symlinks are never read.
GitHub repository
leotrace-hq/leoprevent-plugin
Plugin path inside the repository
copilot/leoprevent
Ref to review
v0.2.46
Commit SHA to review
0ab0fadfc3af450a49f0b6d0d2ffefd89504c70c
Version
0.2.46
License identifier
Apache-2.0
Author name
LeoTrace
Author URL
Homepage URL
Keywords
security
code-review
appsec
secure-coding
vulnerabilities
Additional notes
Tested at this layout with Copilot CLI 1.0.105 and VS Code 1.144.1 on macOS: the hooks load, a planted SQL injection is reported to the agent, fixed and re-checked in the same session. The plugin fails open: if the LeoTrace API is unreachable or the account is not signed in, the turn ends normally.
Activity