← Files Is This AI Agent Safe?ARCHIVED FILE
plugin.json
7.26 KB · Nov 3, 2026 · 18:58 UTC
{
"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
"name": "greenlit-books",
"version": "1.0.2",
"description": "Ask whether an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that make it safer. Also answers how and why questions about AI agents from the books' free chapters and concepts, with links to the passages, checks statements against a sourced claim ledger, and finds a practical book on a topic. Read-only, no sign-in.",
"author": {
"name": "Greenlit Books",
"url": "https://greenlitbooks.com"
},
"homepage": "https://greenlitbooks.com",
"repository": "https://github.com/greenlitbooks/mcp",
"license": "MIT",
"keywords": [
"ai-agents",
"mcp",
"safety",
"verdicts",
"claim-checking",
"glossary",
"books"
],
"extensions": {
"com.openai": {
"interface": {
"displayName": "Is This AI Agent Safe?",
"shortDescription": "Safety verdicts on AI agents",
"longDescription": "Ask whether an AI agent, MCP server, coding assistant or AI product is safe to use, and get a straight verdict from Greenlit Books, with the setup steps that make it safer and a link to the full review. Each verdict comes from reading the product's own code, docs and settings, and says which version it read and when. There are more than 800 of them, covering coding assistants, automation tools and hundreds of MCP servers.\n\nIt also checks statements about AI agents against a ledger of 564 claims, each sorted by what it rests on (a published result, the book's argument, a method you can run, or the author's own account) and each with a citation. Where a claim rests on an outside source, the result says what that source does and does not establish.\n\nAsk it how or why about working with AI agents and it answers from Greenlit's books: it finds the passage in the free first chapters, the concept pages, the glossary and the claim ledger that bears on your question, quotes it with a link to the exact section, and points you to the page where the rest of the topic is. And when you want to go deeper, it finds the right practical book on working with AI, with a free first chapter to read.\n\nRead-only. No account and no sign-in. Nothing you ask is stored beyond short-lived request logs.",
"developerName": "Greenlit Books",
"category": "Security",
"capabilities": [
"Tells you whether a named AI agent, MCP server or coding tool is safe to use, with the review's link",
"Gives the setup steps a review recommends before you connect a tool to your code or accounts",
"Checks a statement about AI agents against 564 claims, each with a citation and its basis",
"Answers how and why questions about AI agents from the books' free chapters and concepts, with a link to the passage",
"Finds a practical book on an AI topic and links its free first chapter"
],
"websiteURL": "https://greenlitbooks.com",
"supportURL": "https://greenlitbooks.com/about#contact",
"privacyPolicyURL": "https://greenlitbooks.com/privacy",
"termsOfServiceURL": "https://greenlitbooks.com/terms",
"defaultPrompt": [
"Is Cursor safe to run on my code?",
"How do I stop an AI agent from saying it finished when it didn't?",
"Which book should I read about prompt injection?"
],
"brandColor": "#1FA85A",
"brandColorDark": "#3DDC84",
"composerIcon": "./assets/icon.png",
"logo": "./assets/logo.png"
},
"review": {
"demo_recording_url": "https://drive.google.com/file/d/1Kcn75kULhY6JV2PZdJvfdpBQIk-mPsoG/view?usp=sharing",
"test_cases": {
"positive": [
{
"description": "Safety verdict for a named AI coding tool: the plugin searches the verdicts and reads the one for Cursor.",
"prompt": "Is Cursor safe to run on my code?",
"tools_triggered": "search, fetch",
"expected_behavior": "Calls search, then fetch on note:is-cursor-safe, and answers with the verdict, the version and date it covers, and its link."
},
{
"description": "Safety verdict for a self-hosted automation tool.",
"prompt": "Is n8n safe to self-host?",
"tools_triggered": "search, fetch",
"expected_behavior": "search returns note:is-n8n-safe first; fetch reads it; the answer gives the verdict and its link."
},
{
"description": "Checks a statement about AI agents against the claim ledger.",
"prompt": "Is it true that AI agents need a human approval step before production changes?",
"tools_triggered": "check_claim",
"expected_behavior": "Returns sourced claims with citations; the answer cites them and says what each external source does not establish."
},
{
"description": "Finds a practical book on a topic.",
"prompt": "Which book should I read about prompt injection?",
"tools_triggered": "search_greenlit_books or find_books_for_topic",
"expected_behavior": "Returns matching books, and the book cards render with the cover, one line, and links to the free chapter and the book's page."
},
{
"description": "Answers a how question about AI agents from the books' free chapters and concepts.",
"prompt": "How do I stop an AI agent from saying it finished when it didn't?",
"tools_triggered": "find_answer_in_books",
"expected_behavior": "Returns passages from the green lie concept page and the free chapters, each with the exact URL to quote and the page to read for more; the answer quotes or paraphrases them and cites the URL."
}
],
"negative": [
{
"description": "Unrelated local question: nothing in this plugin applies.",
"prompt": "What's the best pizza in Naples?",
"tools_triggered": "none",
"expected_behavior": "No tool is called; the assistant answers or declines on its own. If search is called anyway it returns no results."
},
{
"description": "Generic programming request: nothing in this plugin applies.",
"prompt": "Write me a Python script to sort a list",
"tools_triggered": "none",
"expected_behavior": "No tool is called."
},
{
"description": "Booking request: this plugin cannot book or buy anything.",
"prompt": "Book me a flight to Lisbon",
"tools_triggered": "none",
"expected_behavior": "No tool is called; nothing in this plugin books or buys anything."
}
]
},
"commerce": false
},
"publication": {
"release_notes": "Adds a reviewer-accessible walkthrough of safety verdicts, book recommendations, cited answers, claim-ledger evidence and an empty-result state. Includes the neutral safety-review listing and clarified book lookup metadata. Read-only tools and bundled skills are unchanged."
},
"apps": "./.app.json"
}
}
}
SHA-256: 8306f67bc9a6b6dd4617521daae9ef6d95bd7720120e36ec59b68022bbc92cf1