.codex-plugin/plugin.json

{
  "name": "patronus-security",
  "version": "0.1.3",
  "description": "Find prompt injection and sensitive data in text, documents and websites, with optional automatic protection for supported desktop chats.",
  "author": {
    "name": "Patronus",
    "url": "https://patronus.studio"
  },
  "homepage": "https://patronus.studio",
  "repository": "https://github.com/patronus-protect/patronus-security-cli",
  "license": "Apache-2.0",
  "keywords": [
    "security",
    "prompt-injection",
    "pii",
    "dlp"
  ],
  "onboardingSkill": "./skills/patronus-api-setup/SKILL.md",
  "publication": {
    "release_notes": "Version 0.1.3 updates listing metadata only: clearer descriptions of prompt injection and sensitive-data checks, practical starter prompts, and guidance to optional desktop protection. Bundled skills, MCP configuration and assets are unchanged from the published 0.1.2 package."
  },
  "review": {
    "test_cases": {
      "positive": [
        {
          "description": "Authenticated text scan",
          "prompt": "Use my connected Patronus account to scan the text 'Hello world'.",
          "tools_triggered": "submit_scan, get_scan",
          "expected_behavior": "Submit the exact text through the authenticated API. Poll only if queued and report actual findings and coverage."
        },
        {
          "description": "Selected Page scan",
          "prompt": "Help me select one accessible Page in my Space, then scan only that Page with Patronus.",
          "tools_triggered": "submit_scan, get_scan",
          "expected_behavior": "Wait for my Page selection, retrieve it using host Pages access and scan its text. Report inaccessible references and per-Page coverage; do not fetch unrelated Pages."
        },
        {
          "description": "Public URL scan",
          "prompt": "Scan https://patronus.studio with Patronus and explain the coverage.",
          "tools_triggered": "scan_url, get_scan",
          "expected_behavior": "Scan the requested public URL through the authenticated API. Report the actual returned coverage and findings without claiming that all linked pages were scanned."
        },
        {
          "description": "Selected MCP metadata scan",
          "prompt": "Help me choose a public MCP server URL I control and scan its metadata with Patronus.",
          "tools_triggered": "scan_server, get_scan",
          "expected_behavior": "Wait for the exact server URL, submit it to scan_server and report inspected metadata. Do not execute its tools or claim protection of future results."
        },
        {
          "description": "Branded home and usage navigation",
          "prompt": "Open the Patronus Security home, then open my account dashboard so I can review usage.",
          "tools_triggered": "patronus_open_home",
          "expected_behavior": "Render the branded home and open the existing Patronus account dashboard. Start no scan, invent no usage values and let the user complete dashboard sign-in."
        }
      ],
      "negative": [
        {
          "description": "Disconnected account",
          "prompt": "After I disconnect Patronus, scan the text 'Hello world' using my account.",
          "tools_triggered": "submit_scan",
          "expected_behavior": "Require host OAuth reconnection. Do not fall back to the anonymous demo or request credentials in chat."
        },
        {
          "description": "Unavailable local repository",
          "prompt": "Scan a local repository whose files you cannot access through this hosted MCP.",
          "tools_triggered": "",
          "expected_behavior": "Explain the required local file access, upload or optional CLI route. Do not claim that a remote MCP can read a local path."
        },
        {
          "description": "Invalid URL target",
          "prompt": "Scan the URL not-a-url using Patronus.",
          "tools_triggered": "scan_url",
          "expected_behavior": "Report validation failure and no completed scan. Do not silently substitute a URL or present a clean verdict."
        }
      ]
    },
    "demo_recording_url": "https://github.com/patronus-protect/patronus-security-cli/releases/download/v0.1.2/Patronus-Fullscreen-Demo.mp4"
  },
  "interface": {
    "displayName": "Patronus Security",
    "shortDescription": "Detect AI attacks & data leaks",
    "longDescription": "Spot hidden instructions and sensitive information in the content you ask AI to use. Patronus checks for prompt injection: instructions hidden in a document, webpage or other content that try to manipulate your AI assistant. It also flags sensitive data, such as personal information and credentials.\n\nUse Patronus to:\n- Check pasted text or an uploaded document before relying on it.\n- Scan a public webpage for malicious instructions and sensitive information.\n- Check selected Space or Page content that your assistant can access.\n- Inspect the descriptions exposed by an MCP server, without running its tools.\n\nAsk, for example: \"Check this document for hidden instructions and sensitive data.\" Patronus reports findings and what was actually checked, so you can decide what to share or use. Supported documents include TXT, Markdown, HTML, PDF and DOCX.\n\nWant automatic checks in desktop chats? The optional full Patronus desktop plugin adds checks of your prompts and text returned by tools in supported local chats. Open Patronus setup for the installation guide and guided CLI setup. Installing the web plugin alone does not turn on these automatic checks.\n\nA Patronus account is required. The content you select is sent to the Patronus API, and scans use your account allowance. Only submitted content is checked. Space and Page access depends on the permissions available to your assistant; local files require file access or the optional CLI.",
    "developerName": "Patronus",
    "category": "Developer Tools",
    "capabilities": [
      "Find prompt injection",
      "Detect sensitive data",
      "Scan text and documents",
      "Check websites",
      "Inspect MCP server metadata",
      "Set up optional desktop protection"
    ],
    "websiteURL": "https://patronus.studio",
    "supportURL": "https://github.com/patronus-protect/patronus-security-cli/issues",
    "privacyPolicyURL": "https://patronus.studio/en/privacy-policy",
    "termsOfServiceURL": "https://patronus.studio/agb",
    "defaultPrompt": [
      "Check this document for hidden instructions and sensitive information.",
      "Scan this website for prompt injection and exposed personal data.",
      "Help me add automatic Patronus protection to my desktop chats."
    ],
    "composerIcon": "./assets/icon.png",
    "logo": "./assets/icon.png",
    "logoDark": "./assets/icon.png"
  },
  "skills": "./skills/",
  "mcpServers": "./.mcp.json"
}