plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "scamchecker",
  "version": "1.0.0",
  "description": "Check a suspicious email, text message, WhatsApp message, link or screenshot for scam signals. You get your own message back with every red flag quoted and explained, a verdict (almost certainly fake, something is off, no red flags found, or unable to judge) and the next steps. It never says a message is safe and never opens the suspicious link. Built for the Netherlands and Belgium; explanations are in Dutch. No account needed, and messages are not stored.",
  "author": {
    "name": "Samautomation",
    "url": "https://scamchecker.nl/",
    "email": "contact@scamchecker.nl"
  },
  "homepage": "https://scamchecker.nl/",
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Scamchecker.nl",
        "shortDescription": "Check messages for scams",
        "longDescription": "Check a suspicious email, text message, WhatsApp message, link or screenshot for scam signals. You get your own message back with every red flag quoted and explained, a verdict (almost certainly fake, something is off, no red flags found, or unable to judge) and the next steps. It never says a message is safe and never opens the suspicious link. Built for the Netherlands and Belgium; explanations are in Dutch. No account needed, and messages are not stored.",
        "developerName": "Samautomation",
        "category": "Security",
        "capabilities": [
          "Check messages for scam signals",
          "Check links for lookalike domains",
          "Check screenshots of messages"
        ],
        "websiteURL": "https://scamchecker.nl/",
        "supportURL": "https://scamchecker.nl/support",
        "privacyPolicyURL": "https://scamchecker.nl/privacy",
        "termsOfServiceURL": "https://scamchecker.nl/voorwaarden",
        "defaultPrompt": [
          "Is deze sms nep? 'PostNL: Uw pakket kon niet worden bezorgd. Betaal \u20ac1,99 via postnl-bezorging-nl.com'",
          "Is this link safe to open? https://ing-veilig-inloggen.nl/login",
          "Mijn moeder kreeg een WhatsApp van een nieuw nummer dat om geld vraagt. Is dit oplichting?"
        ],
        "brandColor": "#2B2621",
        "logo": "./assets/logo.png",
        "composerIcon": "./assets/logo.png"
      },
      "onboardingSkill": "./skills/scamcheck/SKILL.md",
      "review": {
        "commerce": false,
        "demo_recording_url": "https://scamchecker.nl/static/scamchecker-chatgpt-demo.mp4",
        "test_cases": {
          "positive": [
            {
              "description": "Check a fake parcel text",
              "prompt": "Is deze sms van PostNL echt? 'PostNL: Uw pakket kon niet worden bezorgd. Betaal \u20ac1,99 binnen 24 uur via postnl-bezorging-nl.com/betalen'",
              "tools_triggered": "check_message",
              "expected_behavior": "Verdict 'vrijwel zeker nep', with red flags on 'binnen 24 uur' and the lookalike domain postnl-bezorging-nl.com, plus next steps."
            },
            {
              "description": "Check a lookalike bank link",
              "prompt": "Kun je deze link controleren: https://rabobank-veilig-verificatie.com/login",
              "tools_triggered": "check_message",
              "expected_behavior": "Verdict fake or suspicious; explains the domain imitates rabobank.nl and advises opening the bank app directly. The link is not opened."
            },
            {
              "description": "Check a WhatsApp family emergency scam",
              "prompt": "Mijn moeder kreeg dit op WhatsApp: 'Hoi mam, dit is mijn nieuwe nummer. Kun je \u20ac340 voorschieten?'",
              "tools_triggered": "check_message",
              "expected_behavior": "Verdict 'vrijwel zeker nep' for WhatsApp impersonation fraud, advising to call the child on the old, known number."
            },
            {
              "description": "Check an English phishing email",
              "prompt": "Check this email I got: 'Your Microsoft account will be suspended, verify within 12 hours at micros0ft-account-verify.com'",
              "tools_triggered": "check_message",
              "expected_behavior": "Verdict fake, with red flags on the lookalike domain (zero instead of o) and the 12-hour deadline."
            },
            {
              "description": "Check an ordinary message",
              "prompt": "Is dit bericht te vertrouwen? 'Hoi Sam, morgen om 10 uur bij de tandarts, groet Ellen'",
              "tools_triggered": "check_message",
              "expected_behavior": "Verdict 'geen rode vlaggen gevonden', with the note that this does not prove the message is safe."
            }
          ],
          "negative": [
            {
              "description": "Unrelated writing",
              "prompt": "Schrijf een gedicht over de herfst.",
              "tools_triggered": "",
              "expected_behavior": "Answer without calling check_message."
            },
            {
              "description": "General phone number question",
              "prompt": "Wat is het telefoonnummer van de Fraudehelpdesk?",
              "tools_triggered": "",
              "expected_behavior": "Answer or point to the Fraudehelpdesk without calling check_message; there is no message to check."
            },
            {
              "description": "General explanation",
              "prompt": "Leg uit wat phishing is.",
              "tools_triggered": "",
              "expected_behavior": "Give a general explanation without calling check_message."
            }
          ]
        }
      },
      "publication": {
        "release_notes": "First public release. One read-only tool, check_message, that analyses text, a URL or a screenshot for scam signals and returns a verdict, quoted red flags with explanations and next steps, as text, structured output and an interactive widget. No authentication; rate limited."
      },
      "apps": "./.app.json"
    }
  }
}