Mostafa Amini 1336ec4777 Add attester package-verification instruction and import-check hook ...

The instruction tells Copilot to verify PyPI/npm package and symbol names
against the attester.dev existence oracle (free keyless tier, 25 calls/day
per client IP) before installing or importing, catching hallucinated
dependency names (5.2-21.7% of LLM suggestions per USENIX Security 2025).
The preToolUse hook enforces the same check on code the agent writes:
stdlib-only script, blocks only on a confident oracle negative, fails open
on quota or network trouble, caches answers on disk. README tables
regenerated with npm start.

2026-07-22 01:23:34 -04:00

..

attester-import-check

Add attester package-verification instruction and import-check hook

2026-07-22 01:23:34 -04:00

dependency-license-checker

Dependency License Checker Hook (#1046)

2026-03-19 10:24:53 +11:00

fix-broken-links

fix: harden fix-broken-links prompt url handling (#2083)

2026-06-22 11:38:53 +10:00

governance-audit

fix: address Copilot PR review comments on governance-audit hook

2026-02-18 14:49:17 -08:00

secrets-scanner

Fix ghs_ token regex for new stateless format (#1840)

2026-05-27 10:37:04 +10:00

session-auto-commit

feat: add hooks functionality with automated workflows

2026-02-09 16:44:53 +11:00

session-logger

Address PR review comments for hooks implementation

2026-02-10 14:37:45 +11:00

tool-guardian

Add tool guardian hook (#1044)

2026-03-19 16:06:48 +11:00