better-isms/isms-copilot

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "isms-copilot",
  "version": "0.1.8",
  "description": "Account MCP connection that lets a compliance specialist take over GRC work: framework interpretation, policy drafting, control mapping, gap analysis, risk registers and audit prep, with workspaces, documents, memories and company context in one place.",
  "author": {
    "name": "Better ISMS",
    "email": "support@ismscopilot.com",
    "url": "https://ismscopilot.com"
  },
  "homepage": "https://ismscopilot.com",
  "repository": "https://github.com/better-isms/ismscopilot-plugin",
  "license": "MIT",
  "keywords": [
    "ismscopilot",
    "grc",
    "compliance",
    "iso-27001",
    "soc-2",
    "gdpr",
    "risk-register",
    "audit-prep"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "ISMS Copilot",
        "shortDescription": "Compliance and GRC specialist",
        "longDescription": "Connect your account to delegate GRC work: ISO 27001/27701/42001, SOC 2, GDPR, NIS 2, DORA, EU AI Act, HIPAA and PCI DSS interpretation, policy drafting, control mapping, gap analysis, risk registers and audit prep for compliance and audit teams. Ask the specialist a framework question and continue one conversation per deliverable; company context, memories and workspaces stay with your account. The specialist already knows the frameworks, so you do not need to paste source text. The connected tools cover account and workspace reads, document listings, memories, company context and specialist conversations; they do not accept local code, local files, passwords or API keys. Do not share health records, payment card data or government ID numbers. Answers are general compliance guidance for practitioners, not legal advice: review them before you rely on them. Requires an account.",
        "developerName": "Better ISMS",
        "category": "Security",
        "capabilities": [
          "Compliance Q&A",
          "Policy drafting",
          "Risk registers",
          "Company context"
        ],
        "websiteURL": "https://ismscopilot.com",
        "supportURL": "https://docs.ismscopilot.com/docs/getting-started/contact-support-from-the-support-page-91de7",
        "privacyPolicyURL": "https://trust.ismscopilot.com/en/privacy-policy",
        "termsOfServiceURL": "https://trust.ismscopilot.com/en/terms",
        "defaultPrompt": [
          "Ask ISMS Copilot which ISO 27001 controls cover supplier security.",
          "List my ISMS Copilot workspaces, then list the documents in the first one.",
          "Remember in ISMS Copilot that our certification audit is in November."
        ],
        "brandColor": "#5046e4",
        "brandColorDark": "#c7d2fe",
        "logo": "./assets/logo.png",
        "composerIcon": "./assets/logo.png"
      },
      "onboardingSkill": "./skills/get-started/SKILL.md",
      "review": {
        "demo_recording_url": "https://www.ismscopilot.com/videos/ismscopilot-chatgpt-demo.mp4",
        "test_cases": {
          "positive": [
            {
              "description": "Read the stored company profile",
              "prompt": "What company profile does ISMS Copilot have on file for me?",
              "tools_triggered": "get_company_context",
              "expected_behavior": "Returns the company profile stored on the connected account (test account: Example SaaS SAS, a 60-employee French project management SaaS selling to EU customers, ISO 27001 external audit planned for 2027). Read only; no other tool runs and nothing is changed."
            },
            {
              "description": "Ask the compliance specialist a framework question",
              "prompt": "Ask ISMS Copilot which ISO 27001:2022 Annex A controls cover supplier security.",
              "tools_triggered": "create_conversation",
              "expected_behavior": "Starts one conversation and returns the specialist's answer naming A.5.19 through A.5.23 in plain language, without pasting the standard's text. If the reply is still generating, get_reply is called until the answer is complete."
            },
            {
              "description": "Follow up in the same conversation",
              "prompt": "Ask ISMS Copilot to turn that into a five-item supplier review checklist.",
              "tools_triggered": "send_message",
              "expected_behavior": "Continues the same conversation instead of creating a new one and returns a five-item supplier review checklist."
            },
            {
              "description": "List workspaces and their documents",
              "prompt": "List my ISMS Copilot workspaces, then list the documents in My First Workspace.",
              "tools_triggered": "list_workspaces, list_documents",
              "expected_behavior": "Lists the connected account's workspaces, then that workspace's documents by name. Returns only data belonging to the connected account."
            },
            {
              "description": "Save a memory",
              "prompt": "Remember in ISMS Copilot that our certification audit is in November.",
              "tools_triggered": "create_memory",
              "expected_behavior": "Creates one memory on the connected account and confirms what was saved."
            }
          ],
          "negative": [
            {
              "description": "Unrelated request",
              "prompt": "What's the weather in Paris tomorrow?",
              "expected_behavior": "Answered without calling any ISMS Copilot tool. Weather is outside the scope of the connected tools."
            },
            {
              "description": "Password changes are out of scope",
              "prompt": "Change my ISMS Copilot password.",
              "expected_behavior": "No password tool is exposed over this connection. Declines without calling any tool and explains how to change it from the ISMS Copilot sign-in page."
            },
            {
              "description": "Account deletion is out of scope",
              "prompt": "Delete my ISMS Copilot account.",
              "expected_behavior": "No account-management tool is exposed over this connection. Declines without calling any tool and says account settings are managed in the ISMS Copilot app."
            }
          ]
        },
        "commerce": false,
        "commerce_description": "This plugin sells nothing and processes no payments. The connected tools have no checkout, payment or API key functions, and tool results carry no plan, pricing or upgrade links."
      },
      "publication": {
        "release_notes": "New plugin under the verified business identity. All review cases were run in ChatGPT on the reviewer account."
      }
    }
  }
}