[External Plugin]: agent-commerce-guard

[fxjim]

Plugin name

agent-commerce-guard

Short description

Preflight small, non-sensitive AI-agent commerce action manifests with an approval-gate evaluator before execution.

GitHub repository

fxjim/agent-commerce-guard

Plugin path inside the repository

plugins/agent-commerce-guard

Ref to review

copilot-plugin-v1.0.0

Commit SHA to review

b82f52c619ddfa46f0b2e222de4b87292158dcda

Version

1.0.0

License identifier

MIT

Author name

Jimmy Holman

Author URL

https://github.com/fxjim

Homepage URL

https://agent-commerce-guard.vercel.app

Keywords

agent-security
approval-gates
commerce
copilot
x402
base

Additional notes for reviewers

I am the plugin author and also operate the referenced hosted evaluator. The plugin skill is a neutral, free review workflow for non-sensitive manifests; it does not contain checkout or payment links and never authorizes or executes reviewed actions.

The exact endpoint used by the skill is POST https://agent-commerce-guard.vercel.app/api/policy-review. It accepts at most five actions and 20000 bytes. Its response contains only sanitized summary and results fields and omits purchase links, payment instructions, commands, and submitted action text. The plugin README discloses the affiliation and separates the MIT-licensed plugin from the hosted service and any separately offered local package.

The immutable source snapshot passed the dotnet/skills nightly skill-validator used by Awesome Copilot's external-plugin quality gate. A live endpoint check returned the expected deny result for an over-budget marketplace action with only policy decisions and required evidence.

Submission checklist

• The plugin lives in a public GitHub repository.
• The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
• This submission follows this repository's contribution, security, and responsible AI policies.
• This plugin is not already listed in the Awesome Copilot marketplace.

[github-actions]

✅ External plugin intake passed

This submission passed automated intake validation and quality checks and is ready for maintainer review.

• Plugin: agent-commerce-guard
• Repository: https://github.com/fxjim/agent-commerce-guard
• Ref: copilot-plugin-v1.0.0
• SHA: b82f52c619ddfa46f0b2e222de4b87292158dcda

Quality gate summary

Gate	Status
vally lint	pass
install smoke test	pass
version match	pass
canvas structure	not_run

• vally lint: pass
• install smoke test: pass
• version match: pass
• canvas structure: not_run
• overall: pass

vally lint output

✅ agent-commerce-action-review (3/3 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
    ✓ [orphan-files] No orphan files found across 1 skill(s).
        ✓ orphan-files: No references/ directory found — no orphans possible.

1 skill(s) linted, 1 passed

Install smoke test output

Install smoke test succeeded. Verified /tmp/external-plugin-quality-PRW6oV/copilot-home/.copilot/installed-plugins/external-plugin-intake/agent-commerce-guard/plugin.json.

Version match output

- copilot-plugin-v1.0.0: matched version "1.0.0" at "plugins/agent-commerce-guard/plugin.json".
- b82f52c619ddfa46f0b2e222de4b87292158dcda: matched version "1.0.0" at "plugins/agent-commerce-guard/plugin.json".

Canvas structure output

Canvas structure gate skipped because plugin is not tagged with "canvas".

Canonical external.json payload

{
  "name": "agent-commerce-guard",
  "description": "Preflight small, non-sensitive AI-agent commerce action manifests with an approval-gate evaluator before execution.",
  "version": "1.0.0",
  "author": {
    "name": "Jimmy Holman",
    "url": "https://github.com/fxjim"
  },
  "repository": "https://github.com/fxjim/agent-commerce-guard",
  "homepage": "https://agent-commerce-guard.vercel.app",
  "license": "MIT",
  "keywords": [
    "agent-security",
    "approval-gates",
    "commerce",
    "copilot",
    "x402",
    "base"
  ],
  "source": {
    "source": "github",
    "repo": "fxjim/agent-commerce-guard",
    "path": "plugins/agent-commerce-guard",
    "ref": "copilot-plugin-v1.0.0",
    "sha": "b82f52c619ddfa46f0b2e222de4b87292158dcda"
  }
}

View workflow run