Repository navigation
[External Plugin]: controlloop #6003
Copy link
Copy link
Open
Labels
external-pluginPublic external plugin submissionPublic external plugin submissionneeds-review:MEDIUMContributor reputation check flagged MEDIUM riskContributor reputation check flagged MEDIUM riskready-for-reviewSubmission passed intake validation and is ready for maintainer reviewSubmission passed intake validation and is ready for maintainer review
Description
Plugin name
controlloop
Short description
Ask Copilot what a branch lets your AI agents do. Runs the open-source ControlLoop CLI locally against the default branch and explains the verdict, each authority change, and each finding with its rule documentation. Read-only.
GitHub repository
controlloop-security/controlloop-plugins
Plugin path inside the repository
No response
Ref to review
v0.1.1
Commit SHA to review
083d04382a0c48697f111d2b3894862d643a1636
Version
0.1.1
License identifier
Apache-2.0
Author name
ControlLoop
Author URL
Homepage URL
No response
Keywords
security
agents
mcp
hooks
permissions
code-review
Additional notes for reviewers
- The plugin is the repository root: an Agent Plugins 1.0
plugin.jsonwith one skill (skills/controlloop). It declares no hooks and no MCP server, so nothing starts with a session. - The skill runs the
controlloopCLI on the user's PATH, oruvx controlloopafter asking the user. It never installs anything itself and never edits configuration. - The CLI makes no network calls on its own. If a repository opts into ControlLoop Team (
team_enabled = trueplusCONTROLLOOP_TEAM_TOKEN),controlloop gatesends a scan summary to Team; the skill asks before such a run. This is described in the README's Data section. - Install for testing:
copilot plugin marketplace add controlloop-security/controlloop-plugins, thencopilot plugin install controlloop@controlloop.
Submission checklist
- The plugin lives in a public GitHub repository.
- The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
- This submission follows this repository's contribution, security, and responsible AI policies.
- This plugin is not already listed in the Awesome Copilot marketplace.
Metadata
Metadata
Assignees
Labels
external-pluginPublic external plugin submissionPublic external plugin submissionneeds-review:MEDIUMContributor reputation check flagged MEDIUM riskContributor reputation check flagged MEDIUM riskready-for-reviewSubmission passed intake validation and is ready for maintainer reviewSubmission passed intake validation and is ready for maintainer review
Activity
github-actions commentedon Oct 30, 2026
🟡 Contributor Reputation Check: MEDIUM risk
Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.
github-actions commentedon Oct 30, 2026
✅ External plugin intake passed
This submission passed automated intake validation and quality checks and is ready for maintainer review.
View workflow run · Download full quality gate logs
v0.1.1083d04382a0c48697f111d2b3894862d643a1636Reviewer signals
These are non-blocking heuristics for maintainer review; they are not evidence of misconduct or low quality.
Quality gate summary
Legend: ✅ pass ·⚠️ warning · 🛑 fail
spec compliance output (✅ pass)
vally lint output (✅ pass)
install smoke test output (✅ pass)
Version match output
Ref/SHA consistency output
Canvas structure output
Canonical external.json payload
{ "name": "controlloop", "description": "Ask Copilot what a branch lets your AI agents do. Runs the open-source ControlLoop CLI locally against the default branch and explains the verdict, each authority change, and each finding with its rule documentation. Read-only.", "version": "0.1.1", "author": { "name": "ControlLoop", "url": "https://controlloop.ai" }, "repository": "https://github.com/controlloop-security/controlloop-plugins", "license": "Apache-2.0", "keywords": [ "security", "agents", "mcp", "hooks", "permissions", "code-review" ], "source": { "source": "github", "repo": "controlloop-security/controlloop-plugins", "ref": "v0.1.1", "sha": "083d04382a0c48697f111d2b3894862d643a1636" } }