Skip to content

better-isms/aevral

v0.1.0MIT

Catch security flaws before you merge. Setup skill for the Aevral GitHub App: authorization, IDOR, and business-logic reviews on pull requests, with a suggested fix you apply. Public repos are free up to 500 reviews per organization per month.

GitHubOpen Website

Aevral for coding agents

Catch security flaws before you merge. Automatic pull request reviews flag authorization, IDOR, and business-logic flaws, with a suggested fix you apply.

By Better ISMS.

This plugin does not review code on your machine. It is a setup skill for the Aevral GitHub App. After the App is installed, the next pull request can already be reviewed, including before anyone claims in the console. MCP is not live. Do not invent an MCP server.

Install

Claude Code

/plugin marketplace add better-isms/aevral-plugin
/plugin install aevral@aevral-plugins

Then run /aevral:review.

Codex CLI

codex plugin marketplace add better-isms/aevral-plugin

Then /plugins and install aevral.

Cursor

Load the repo as an Agent Plugin (root plugin.json) from Customize, or install from the Cursor Marketplace once listed. Local test: symlink this repo into ~/.cursor/plugins/local/aevral.

GitHub Copilot CLI

copilot plugin marketplace add better-isms/aevral-plugin
copilot plugin install aevral@aevral-plugins

Grok

grok plugin marketplace add better-isms/aevral-plugin
grok plugin install aevral --trust

Gemini CLI

gemini extensions install https://github.com/better-isms/aevral-plugin

Then ask the agent to set up Aevral. Gemini does not expose /aevral:review.

skills.sh (optional)

npx skills add better-isms/aevral-plugin

That installer keys off the skill YAML name review. If another skill with that name is already installed the same way, they share that destination. Prefer the marketplace commands above when more than one review plugin is in use.

What the human clicks

Same GitHub user for both.

  1. Tagged console login (so the listing source is stored), for example https://app.aevral.com/login?ref=claude-plugin
  2. GitHub App: https://github.com/apps/aevral

Reviews can start on the next pull request after the App install. The console is for claiming, reports, turning reviews off, and an optional whole-repo scan.

Pricing

  • Public repositories: free up to 500 reviews per organization per month.
  • Private repositories: free up to 25 per month.

Paid plans: https://aevral.com/pricing

Links

License

MIT. See LICENSE.