pub struct ReputationConfig {
pub enabled: bool,
pub similarity_threshold: f32,
pub min_name_len: usize,
pub enforcement: ReputationEnforcement,
}Expand description
Install-time plugin/skill name-similarity (“typosquat”) advisory check (spec-043, #5864).
Compares an incoming plugin’s declared name and skill names against
zeph_skills::bundled::bundled_skill_names() plus managed and other installed plugins’
skill names, using a Levenshtein-based similarity ratio computed entirely locally — zero
network calls (NFR-001). Advisory by default (enforcement = "warn", FR-006/SC-004).
§Examples
[plugins.reputation]
enabled = true
similarity_threshold = 0.65
min_name_len = 3
enforcement = "warn"Fields§
§enabled: boolEnable the check at install time. Default: true (advisory, zero-network, mirrors the
on-by-default posture of the existing skill-body injection scan).
similarity_threshold: f32Similarity ratio in [0, 1] at or above which a near-match warns. Higher = stricter
(requires a closer match) = fewer warnings. Default 0.65 — the loosest value that
still catches the motivating github-pr/git-pr example (similarity 0.667) with a
margin, while producing zero false positives among Zeph’s own bundled skill names.
min_name_len: usizeSkip comparisons where the shorter of the two compared names has fewer than this many
characters. Default 3 — covers the bundled git skill (spec-043 M1); 1-2 character
names are always skipped as noise regardless of this setting.
enforcement: ReputationEnforcement"warn" (default, advisory-only — install/update proceeds) or "block" (opt-in hard
gate: the install/update is refused before any file is written or swapped).
zeph plugin add --strict-reputation overrides this to "block" for a single
invocation without changing the persisted config.
Trait Implementations§
Source§impl Clone for ReputationConfig
impl Clone for ReputationConfig
Source§fn clone(&self) -> ReputationConfig
fn clone(&self) -> ReputationConfig
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more