[External Plugin]: agent-commerce-guard

[fxjim]

Plugin name

agent-commerce-guard

Short description

Review proposed AI-agent actions locally with an evidence-first approval rubric before execution.

GitHub repository

fxjim/agent-commerce-guard

Plugin path inside the repository

plugins/agent-commerce-guard

Ref to review

copilot-plugin-v1.1.0

Commit SHA to review

305b3422bc3f2b40085a18378dc7794d3e86c10e

Version

1.1.0

License identifier

MIT

Author name

Jimmy Holman

Author URL

https://github.com/fxjim

Homepage URL

https://github.com/fxjim/agent-commerce-guard/tree/copilot-plugin-v1.1.0/plugins/agent-commerce-guard

Keywords

agent-security
approval-gates
risk-review
change-management
preflight-review
copilot
agent-safety

Additional notes for reviewers

This revision addresses the maintainer feedback by removing the hosted-service wrapper and all commercial links from the plugin.

Version 1.1.0 is fully self-contained and runs locally. It makes no network requests, has no hosted-service dependency, and contains no checkout, payment, signup, or promotional links. The skill teaches a practical Copilot review workflow using a local decision rubric, explicit evidence requirements, and worked examples. It never authorizes or executes an action.

The immutable source snapshot passed Awesome Copilot's current external-plugin quality-gate script locally: Vally lint, Copilot CLI install smoke test, version match, and ref/SHA consistency all passed.

Submission checklist

• The plugin lives in a public GitHub repository.
• The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
• This submission follows this repository's contribution, security, and responsible AI policies.
• This plugin is not already listed in the Awesome Copilot marketplace.

[github-actions]

✅ External plugin intake passed

This submission passed automated intake validation and quality checks and is ready for maintainer review.

• Plugin: agent-commerce-guard
• Repository: https://github.com/fxjim/agent-commerce-guard
• Ref: copilot-plugin-v1.1.0
• SHA: 305b3422bc3f2b40085a18378dc7794d3e86c10e

Quality gate summary

Gate	Status
vally lint	pass
install smoke test	pass
version match	pass
ref/sha consistency	pass
canvas structure	not_run

• vally lint: pass
• install smoke test: pass
• version match: pass
• ref/sha consistency: pass
• canvas structure: not_run
• overall: pass

vally lint output

✅ agent-commerce-action-review (3/3 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
    ✓ [orphan-files] No orphan files found across 1 skill(s).
        ✓ orphan-files: All 2 file(s) in references/ are reachable from SKILL.md.

1 skill(s) linted, 1 passed

Install smoke test output

Install smoke test succeeded. Verified /tmp/external-plugin-quality-WxhGy8/copilot-home/.copilot/installed-plugins/external-plugin-intake/agent-commerce-guard/plugin.json.

Version match output

- copilot-plugin-v1.1.0: matched version "1.1.0" at "plugins/agent-commerce-guard/plugin.json".
- 305b3422bc3f2b40085a18378dc7794d3e86c10e: matched version "1.1.0" at "plugins/agent-commerce-guard/plugin.json".

Ref/SHA consistency output

source.ref "copilot-plugin-v1.1.0" resolves to the same commit as source.sha "305b3422bc3f2b40085a18378dc7794d3e86c10e".

Canvas structure output

Canvas structure gate skipped because plugin is not tagged with "canvas".

Canonical external.json payload

{
  "name": "agent-commerce-guard",
  "description": "Review proposed AI-agent actions locally with an evidence-first approval rubric before execution.",
  "version": "1.1.0",
  "author": {
    "name": "Jimmy Holman",
    "url": "https://github.com/fxjim"
  },
  "repository": "https://github.com/fxjim/agent-commerce-guard",
  "homepage": "https://github.com/fxjim/agent-commerce-guard/tree/copilot-plugin-v1.1.0/plugins/agent-commerce-guard",
  "license": "MIT",
  "keywords": [
    "agent-security",
    "approval-gates",
    "risk-review",
    "change-management",
    "preflight-review",
    "copilot",
    "agent-safety"
  ],
  "source": {
    "source": "github",
    "repo": "fxjim/agent-commerce-guard",
    "path": "plugins/agent-commerce-guard",
    "ref": "copilot-plugin-v1.1.0",
    "sha": "305b3422bc3f2b40085a18378dc7794d3e86c10e"
  }
}

View workflow run

[aaronpowell]

/reject This is primarily marketing for a paid service.

[github-actions]

❌ External plugin rejected

A maintainer rejected agent-commerce-guard, and the submission issue has been closed.

Reason

This is primarily marketing for a paid service.

If you address the feedback, edit this issue with the updated details and have the issue author or a maintainer comment /rerun-intake to re-run automated intake.

[fxjim]

/rerun-intake