awesome-copilot/hooks/attester-import-check/hooks.json at 9933dcad5be5caeb288cebcd370eeeb2fc2f1685 - awesome-copilot - Gitea

Awesome/awesome-copilot

mirror of https://github.com/github/awesome-copilot.git synced 2026-08-01 23:12:29 +00:00

Files

T

Mostafa Amini 1336ec4777 Add attester package-verification instruction and import-check hook

The instruction tells Copilot to verify PyPI/npm package and symbol names
against the attester.dev existence oracle (free keyless tier, 25 calls/day
per client IP) before installing or importing, catching hallucinated
dependency names (5.2-21.7% of LLM suggestions per USENIX Security 2025).
The preToolUse hook enforces the same check on code the agent writes:
stdlib-only script, blocks only on a confident oracle negative, fails open
on quota or network trouble, caches answers on disk. README tables
regenerated with npm start.

2026-07-22 01:23:34 -04:00

17 lines

278 B

JSON

Raw Blame History

 {
   "version": 1,
   "hooks": {
     "preToolUse": [
       {
         "type": "command",
         "bash": "hooks/attester-import-check/check-imports.py",
         "cwd": ".",
         "env": {
           "ATTESTER_MODE": "block"
         },
         "timeoutSec": 30
       }
     ]
   }
 }