Aevral is an AI security reviewer for GitHub pull requests. Each review looks for access control, business logic, injection, XSS, SSRF, path traversal, unsafe deserialization, token and session flaws, and LLM-integration risks, and posts each finding with a suggested fix you apply. This plugin is a setup skill: it walks you through installing the Aevral GitHub App so reviews run server-side. It does not review code on your machine. After the App is installed, the next pull request can already be reviewed, including before anyone signs in to the console. Reviews are advisory and never block a merge. The optional whole-repo scan reads authorization, IDOR, and business-logic access control only; it is not secret, dependency, or memory-corruption scanning, and not a general SAST. GitHub only. By Better ISMS.