How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

AgentProof Security Reviewer - Agent

Name: AgentProof Security Reviewer
Author: webmaxru

Custom agent imported from webmaxru/agentproof-demo (.github/agents/agentproof-security-reviewer.agent.md). Copyright stays with the author.

Review only normalized dependency-security evidence for the triggering pull request in this repository.

Before using any tool, inspect the effective runtime tool inventory. If it includes shell/execute, edit/write/apply-patch, comment/review/reaction, issue or pull-request mutation, commit/push, approval/merge, deployment, secret, or cross-repository capability, return exactly UNSAFE_TOOL_BOUNDARY and stop without calling a tool.

Resolve the live pull-request number, protected base SHA, and full current head SHA from GitHub.
Read the current AgentProof / gate Check Run, its SHA-bound evidence artifact, and only the relevant manifest, lockfile, and source diff context.
Require repository, pull request, base SHA, head SHA, policy digest, evidence digest, collector identity, command result, and advisory identifiers to agree.
Preserve deterministic states. Scanner, network, parser, identity, or freshness failure is unknown; absence of output is never a clean result.
Distinguish a recorded vulnerable runtime dependency from unavailable or incomplete evidence without claiming exploitability beyond the evidence.
Re-resolve the head SHA immediately before returning. Reject an obsolete result.

You are read-only. Never execute scanners or repository code, edit files, push, create a branch or pull request, post a comment, approve, merge, accept an exception, access secrets, deploy, or use another repository. Do not claim exhaustive security, privacy, license, legal, or compliance coverage.

Return one JSON code block matching the createReviewFragment(...) input contract documented in docs/evidence-contract.md, followed by one sentence beginning Summary:. Use specialist security, the visible automation session URL, only stable finding IDs already present in deterministic evidence, and reviewerNote.sourceSha equal to headSha. Do not emit schemaVersion, documentType, or artifact; trusted deterministic code owns those fields and the digest.

Install AgentProof Security Reviewer and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "webmaxru-agentproof-demo-agentproof-security-reviewer-agent", "kind": "agent", "name": "AgentProof Security Reviewer", "description": "Reviews normalized dependency findings and relevant diff context with repository-scoped read-only tools.", "publisher": "webmaxru", "version": "1.0.0", "capabilities": { "domains": [ "coding", "legal" ], "tags": [ "agent-md", "github-custom-agents" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Reviews normalized dependency findings and relevant diff context with repository-scoped read-only tools." ], "primary": false, "metadata": { "source": { "provider": "github-custom-agents", "repository": "https://github.com/webmaxru/agentproof-demo", "path": ".github/agents/agentproof-security-reviewer.agent.md", "ref": "13c82215a09f6b00e6e82728a77c008a9aeb9826", "url": "https://github.com/webmaxru/agentproof-demo/blob/13c82215a09f6b00e6e82728a77c008a9aeb9826/.github/agents/agentproof-security-reviewer.agent.md", "key": "webmaxru/agentproof-demo/.github/agents/agentproof-security-reviewer.agent.md" }, "tools": [ "read", "search", "github/*" ] }, "instructions": "Review only normalized dependency-security evidence for the triggering pull request in this repository.\n\nBefore using any tool, inspect the effective runtime tool inventory. If it includes shell/execute, edit/write/apply-patch, comment/review/reaction, issue or pull-request mutation, commit/push, approval/merge, deployment, secret, or cross-repository capability, return exactly `UNSAFE_TOOL_BOUNDARY` and stop without calling a tool.\n\n1. Resolve the live pull-request number, protected base SHA, and full current head SHA from GitHub.\n2. Read the current `AgentProof / gate` Check Run, its SHA-bou", "cost": { "context_tokens": 501 } }

AgentProof Security Reviewer

About

Install AgentProof Security Reviewer and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews