[External Plugin]: supercov

[Nedomas]

Plugin name

supercov

Short description

Coverage, security and code quality for coding agents. One skill runs the project's existing tests, measures line, branch and MC/DC coverage, and writes tests for code no test reaches; the other scans source for security vulnerabilities.

GitHub repository

supercorp-ai/supercov

Plugin path inside the repository

plugins/supercov

Ref to review

v2.0.1

Commit SHA to review

7392f70ef4cbecbf07f63c239bb780cfdb3f1b87

Version

2.0.1

License identifier

MIT

Author name

Supercorp

Author URL

https://supercorp.ai

Homepage URL

https://supercov.com

Keywords

coverage
testing
code-quality
security

Additional notes for reviewers

The skills run npx supercov, so they need Node.js 22. Coverage runs locally; security and code quality send source files to TypeSafe's API only when the user has set TYPESAFE_API_KEY. I ran eng/external-plugin-quality-gates.mjs from this repository against the plugin before submitting: spec compliance, vally lint and the Copilot CLI install smoke test all pass. Disclosure: I maintain Supercov.

Submission checklist

• The plugin lives in a public GitHub repository.
• The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
• This submission follows this repository's contribution, security, and responsible AI policies.
• This plugin is not already listed in the Awesome Copilot marketplace.

[github-actions]

🟡 Contributor Reputation Check: MEDIUM risk

Check	Risk
Profile	MEDIUM
Credential audit	NONE

Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.

[github-actions]

✅ External plugin intake passed

This submission passed automated intake validation and quality checks and is ready for maintainer review.

View workflow run · Download full quality gate logs

• Plugin: supercov
• Repository: https://github.com/supercorp-ai/supercov
• Ref: v2.0.1
• SHA: 7392f70ef4cbecbf07f63c239bb780cfdb3f1b87

Reviewer signals

These are non-blocking heuristics for maintainer review; they are not evidence of misconduct or low quality.

Signal	Result
Repository age	32 day(s)
Repository activity	0 watchers
Repository counts	120 stars · 0 watchers · 5 forks · 0 open issues/PRs
Homepage heuristics	⚠️ checkout

Quality gate summary

Legend: ✅ pass · ⚠️ warning · 🛑 fail

Gate	Status
spec compliance (non-blocking)	✅ pass
vally lint	✅ pass
install smoke test	✅ pass
version match	✅ pass
ref/sha consistency	✅ pass
canvas structure	⚪ not_run

• spec compliance: pass
• vally lint: pass
• install smoke test: pass
• version match: pass
• ref/sha consistency: pass
• canvas structure: not_run
• overall: pass

spec compliance output (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

vally lint output (✅ pass)

✅ supercov-security (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ supercov (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

2 skill(s) linted, 2 passed

install smoke test output (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-1MwKwX/copilot-home/.copilot/installed-plugins/external-plugin-intake/supercov/plugin.json.

Version match output

- v2.0.1: matched version "2.0.1" at "plugins/supercov/plugin.json".
- 7392f70ef4cbecbf07f63c239bb780cfdb3f1b87: matched version "2.0.1" at "plugins/supercov/plugin.json".

Ref/SHA consistency output

source.ref "v2.0.1" resolves to the same commit as source.sha "7392f70ef4cbecbf07f63c239bb780cfdb3f1b87".

Canvas structure output

Canvas structure gate skipped because plugin is not tagged with "canvas".

Canonical external.json payload

{
  "name": "supercov",
  "description": "Coverage, security and code quality for coding agents. One skill runs the project's existing tests, measures line, branch and MC/DC coverage, and writes tests for code no test reaches; the other scans source for security vulnerabilities.",
  "version": "2.0.1",
  "author": {
    "name": "Supercorp",
    "url": "https://supercorp.ai"
  },
  "repository": "https://github.com/supercorp-ai/supercov",
  "homepage": "https://supercov.com",
  "license": "MIT",
  "keywords": [
    "coverage",
    "testing",
    "code-quality",
    "security"
  ],
  "source": {
    "source": "github",
    "repo": "supercorp-ai/supercov",
    "path": "plugins/supercov",
    "ref": "v2.0.1",
    "sha": "7392f70ef4cbecbf07f63c239bb780cfdb3f1b87"
  }
}