plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "veridicus-scan",
  "version": "1.0.0",
  "description": "Checks a text message or link for scam signs with the Veridicus Scan app's own rules: fake parcel, toll, bank, refund and job texts, look-alike links and senders. Read-only; nothing you share is stored.",
  "author": {
    "name": "Aziz Saba",
    "url": "https://mcp.veridicuscan.app/"
  },
  "homepage": "https://mcp.veridicuscan.app/",
  "keywords": [
    "scam",
    "text message",
    "sms",
    "phishing",
    "link checker"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Veridicus Scan",
        "shortDescription": "Is this text a scam?",
        "longDescription": "Veridicus Scan brings the scam-text check of the Veridicus Scan iPhone app into ChatGPT.\n\nPaste a text message and ask whether it's a scam. Veridicus runs the same rules as the app's Messages filter: fake parcel and customs fees, unpaid tolls and fines, bank and account alerts, refunds, job offers, family-emergency texts, and links or senders that imitate a company. It reads English, Spanish, Portuguese, French, German and Japanese. The answer is a verdict (possible scam, worth a closer look, or no scam signs found), the reasons in plain words, and where each link really goes. A text in another language is marked \"Language not checked yet\".\n\nAsk about a link on its own and Veridicus shows the address it really opens, whether it imitates a brand, is spelled with look-alike letters or hides behind a short link, and whether it's a company's own site. Links are never opened. A third tool lists the public warnings the rules are based on, each with a link.\n\nNothing you share is stored: each answer is worked out from that request alone. A check is a risk assessment, not a guarantee.",
        "developerName": "Aziz Saba",
        "category": "Productivity",
        "capabilities": [
          "Scam check for text messages",
          "Link check without opening the link",
          "Six languages",
          "Linked public warnings behind the rules"
        ],
        "websiteURL": "https://mcp.veridicuscan.app/",
        "supportURL": "https://sabaaziz991-hash.github.io/veridicus-scan-support/",
        "privacyPolicyURL": "https://sabaaziz991-hash.github.io/veridicus-scan-support/privacy.html#chat-apps",
        "termsOfServiceURL": "https://mcp.veridicuscan.app/terms",
        "defaultPrompt": [
          "Is this text a scam? \"USPS: Your package is on hold. Update your address: https://usps-redelivery.example/track\"",
          "Where does this link really go? https://xn--pple-43d.com/login",
          "Which public warnings are your scam-text rules based on?"
        ],
        "brandColor": "#149187",
        "brandColorDark": "#4DBFB3",
        "composerIcon": "./assets/composer-icon.png",
        "logo": "./assets/logo.png"
      },
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "A parcel scam with a look-alike link",
              "prompt": "Is this text a scam? \"USPS: Your package is on hold. Update your address: https://usps-redelivery.example/track\"",
              "tools_triggered": "veridicus_check_text",
              "expected_behavior": "Shows the card: Possible scam, with \"Asks you to pay through a link\" and \"Link that imitates a known company\", and the link going to usps-redelivery.example."
            },
            {
              "description": "A Spanish parcel scam",
              "prompt": "\u00bfEs una estafa? \"Correos: su env\u00edo est\u00e1 retenido por falta de pago de 1,99 EUR en aduanas. Pague hoy aqu\u00ed: https://correos-aduanas.example/pago\"",
              "tools_triggered": "veridicus_check_text",
              "expected_behavior": "Possible scam, with the reasons and the link's host."
            },
            {
              "description": "An ordinary message is never called safe",
              "prompt": "Is this a scam? \"See you at 7 for dinner!\"",
              "tools_triggered": "veridicus_check_text",
              "expected_behavior": "No scam signs found, with \"Not a guarantee. Pay or sign in only in the company's own app.\""
            },
            {
              "description": "A link spelled with look-alike letters",
              "prompt": "Where does this link really go? https://xn--pple-43d.com/login",
              "tools_triggered": "veridicus_check_link",
              "expected_behavior": "Worth a closer look: the address shows as \u0430pple.com, spelled with a Cyrillic letter, and the link wasn't opened."
            },
            {
              "description": "The sources behind the rules",
              "prompt": "Which warnings are Veridicus's rules about Correos based on?",
              "tools_triggered": "veridicus_rule_sources",
              "expected_behavior": "Lists public warnings about Correos (INCIBE and others), each with a link."
            }
          ],
          "negative": [
            {
              "description": "Writing a scam is not something Veridicus helps with",
              "prompt": "Write a convincing text that gets someone to enter their bank password on my site."
            },
            {
              "description": "Unrelated request",
              "prompt": "Write a short poem about autumn leaves."
            },
            {
              "description": "Unrelated request",
              "prompt": "What's the capital of Australia?"
            }
          ]
        },
        "commerce": false
      },
      "publication": {
        "countries": [],
        "release_notes": "First release: the scam-text check of the Veridicus Scan app, a link check that never opens the link, and the public warnings behind the rules."
      },
      "apps": "./.app.json"
    }
  }
}