[External Plugin]: sechelix

[omarmohelal]

Plugin name

sechelix

Short description

Evidence-first application-security Agent Skill for repositories and environments you are authorized to test. Every candidate finding goes to an independent verifier whose job is to disprove it before it is reported.

GitHub repository

omarmohelal/SecHelix

Plugin path inside the repository

No response

Ref to review

v4.0.0-alpha.3

Commit SHA to review

0415edbb66882b9ccdd3b63da5013098f77ca35e

Version

4.0.0-alpha.3

License identifier

Apache-2.0

Author name

Omar

Author URL

https://github.com/omarmohelal

Homepage URL

https://sechelix.com

Keywords

appsec
application-security
security-audit
agent-skills
copilot-cli
ai-security
mcp-security
authorization
business-logic
devsecops

Additional notes for reviewers

Edited 2026-09-09 in response to @aaronpowell, then again to clear the intake spec warning. This issue predated the current intake and was missing the submission marker and the checklist, so it never triggered the intake workflow — that is what "hasn't been submitted properly using the form" was pointing at, and it was correct. Rather than open a duplicate, this body has been reformatted to match the current external-plugin.yml template exactly, and the ref, SHA and version now point at the release cut today (v4.0.0-alpha.3) instead of the v3.4.0-alpha.2 originally submitted. Intake then flagged an Agent Plugins v1.0.0 manifest warning; that is fixed in 4.0.0-alpha.3, which the ref and SHA above now point at. If a fresh issue is preferred over an edit, say so and this one will be closed in favour of it.

What it is. SecHelix maps the attack surface, resolves which of a 546-item catalog of security hypotheses actually apply, reviews in parallel across 17 specialist role profiles, and then sends every candidate to an independent verifier whose job is to refute it. Applicability resolves to APPLICABLE / NOT_APPLICABLE / UNKNOWN / BLOCKED, so missing evidence is never read as absence. High and Critical findings require regression proof. The release gate is fail-closed: PASS, PASS_WITH_KNOWN_RISK, BLOCKED, or INCOMPLETE.

Coverage emphasis is the classes static pattern matching handles worst: object and function authorization (BOLA/IDOR/BFLA), tenant isolation, business logic, payments and ledger invariants, race conditions and idempotency, supply chain, and AI/agent/MCP boundaries. An UNTRUSTED_REPO mode treats repository content as data and never as control instructions, so a CLAUDE.md or AGENTS.md in a reviewed repository cannot redirect the review of itself.

What is new since the original submission. A root-level GitHub Action reporting PASS/PASS_WITH_KNOWN_RISK/BLOCKED/INCOMPLETE; the MCP adapter published to the official MCP Registry as io.github.omarmohelal/sechelix; and examples/expense-api, a 90-second reproducible demo of one real cross-tenant read and one refuted false positive, driven by CI in the vulnerable, patched and reverted states.

Verification at this SHA. Full suite 1232 passed / 8 skipped. Eleven repository validators pass, including a no-secrets scan over tracked files, local link resolution, and a portable-skill drift check. CodeQL, OpenSSF Scorecard and dependency review all pass on main. The optional Python runner has an empty dependency list and installs no hooks, MCP servers or binaries.

What is not claimed. No Copilot model-behaviour evaluation was run. The full SecHelix workflow is NOT_MEASURED and no detection-rate or comparative score is claimed anywhere in the repository; a 76-case blind-label result is published with an explicit boundary saying it describes the label task and not the complete workflow.

Submission checklist

• The plugin lives in a public GitHub repository.
• The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
• This submission follows this repository's contribution, security, and responsible AI policies.
• This plugin is not already listed in the Awesome Copilot marketplace.

[github-actions]

🟡 Contributor Reputation Check: MEDIUM risk

Check	Risk
Profile	MEDIUM
Credential audit	NONE

Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.

[aaronpowell]

this hasn't been submitted properly using the form to trigger the intake workflow.

[omarmohelal]

@aaronpowell you were right, thank you for looking.

This issue predates the current intake: it was missing the <!-- external-plugin-submission --> marker and the submission checklist, so external-plugin-intake.yml never fired on it and it never picked up the external-plugin label the template applies. That is what made it look like it bypassed the form.

I have reformatted the body to match the current external-plugin.yml exactly and refreshed the ref, SHA and version to today's release (v4.0.0-alpha.2, 0bb582a93ab6678df79e766da14c2714a41a60e3) rather than the v3.4.0-alpha.2 originally submitted. I edited in place instead of opening a new issue to avoid a duplicate in your queue — but if a fresh submission through the form is what you would rather have, say so and I will close this one in favour of it. Happy either way.

[github-actions]

✅ External plugin intake passed

This submission passed automated intake validation and quality checks and is ready for maintainer review.

• Plugin: sechelix
• Repository: https://github.com/omarmohelal/SecHelix
• Ref: v4.0.0-alpha.3
• SHA: 0415edbb66882b9ccdd3b63da5013098f77ca35e

Reviewer signals

These are non-blocking heuristics for maintainer review; they are not evidence of misconduct or low quality.

Signal	Result
Repository age	8 day(s)
Repository activity	repository is 8 day(s) old; 0 watchers; 0 forks
Repository counts	1 stars · 0 watchers · 0 forks · 6 open issues/PRs
Homepage heuristics	no configured signal

Quality gate summary

Legend: ✅ pass · ⚠️ warning · 🛑 fail

Gate	Status
spec compliance (non-blocking)	✅ pass
vally lint	✅ pass
install smoke test	✅ pass
version match	✅ pass
ref/sha consistency	✅ pass
canvas structure	⚪ not_run

• spec compliance: pass
• vally lint: pass
• install smoke test: pass
• version match: pass
• ref/sha consistency: pass
• canvas structure: not_run
• overall: pass

spec compliance output (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

vally lint output (✅ pass)

✅ sechelix (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

install smoke test output (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-GHC72H/copilot-home/.copilot/installed-plugins/external-plugin-intake/sechelix/plugin.json.

Version match output

- v4.0.0-alpha.3: matched version "4.0.0-alpha.3" at "plugin.json".
- 0415edbb66882b9ccdd3b63da5013098f77ca35e: matched version "4.0.0-alpha.3" at "plugin.json".

Ref/SHA consistency output

source.ref "v4.0.0-alpha.3" resolves to the same commit as source.sha "0415edbb66882b9ccdd3b63da5013098f77ca35e".

Canvas structure output

Canvas structure gate skipped because plugin is not tagged with "canvas".

Canonical external.json payload

{
  "name": "sechelix",
  "description": "Evidence-first application-security Agent Skill for repositories and environments you are authorized to test. Every candidate finding goes to an independent verifier whose job is to disprove it before it is reported.",
  "version": "4.0.0-alpha.3",
  "author": {
    "name": "Omar",
    "url": "https://github.com/omarmohelal"
  },
  "repository": "https://github.com/omarmohelal/SecHelix",
  "homepage": "https://sechelix.com",
  "license": "Apache-2.0",
  "keywords": [
    "appsec",
    "application-security",
    "security-audit",
    "agent-skills",
    "copilot-cli",
    "ai-security",
    "mcp-security",
    "authorization",
    "business-logic",
    "devsecops"
  ],
  "source": {
    "source": "github",
    "repo": "omarmohelal/SecHelix",
    "ref": "v4.0.0-alpha.3",
    "sha": "0415edbb66882b9ccdd3b63da5013098f77ca35e"
  }
}

View workflow run