Ai Source Review (ai-source-review)

Summary

LLM review of fetched HTML source for security and quality issue categories.

Classification

• Category: SECURITY
• Plugin id: ai-source-review
• Version: 1.0.0
• Target types: WEBSITE, WEBSHOP
• Weight class: HEAVY
• Risk level: LOW
• Browser required: No (HTTP / Node / other — see source)
• Tier / group: Tier 6 — AI-powered

Schedule

• scheduleHints: { defaultInterval: '0 3 1 * *', priority: 10 }
• Prerequisites: [{ type: 'uptime', mode: 'not_down' }]

Configurable inputs

Public keys are derived from inputSchema: z.object({ ... }) (underscore-prefixed keys are runtime-only and omitted here).

Field	Notes
maxPages	Zod field in inputSchema — see source for defaults, min/max, and .describe().
timeout	Zod field in inputSchema — see source for defaults, min/max, and .describe().
model	Zod field in inputSchema — see source for defaults, min/max, and .describe().

Runtime / injected config

• _aiCapBlocked — skips run when team AI cap is hit.
• _aiSourceReviewModel — team-configured model injected by the worker.
• OpenAI (or compatible) usage returned as _aiUsage on results for billing.

What it does

• Runs as part of the worker test execution pipeline; results become Run rows and may create Finding records.
• LLM review of fetched HTML source for security and quality issue categories.
• For finding titles, metrics, and artifacts specific to this plugin, refer to the implementation linked below.

Source

packages/test-plugins/src/plugins/ai-source-review.ts