plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "alchex",
  "version": "1.0.0",
  "description": "Compliance management for ISO 27001 and other standards: check where your organization stands, read its policies, and follow up controls, evidence, risks and audit tasks in your Alchex workspace.",
  "author": {
    "name": "Alchex",
    "email": "support@alchex.com",
    "url": "https://alchex.com"
  },
  "homepage": "https://alchex.com",
  "license": "Proprietary",
  "keywords": [
    "compliance",
    "iso 27001",
    "audit",
    "controls",
    "risk",
    "management system"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Alchex",
        "shortDescription": "Compliance management software",
        "longDescription": "Alchex is compliance management software for businesses that must meet ISO 27001 and other management-system standards and pass their audits. This plugin brings your Alchex workspace into ChatGPT so you can ask where you stand against a standard, read and search your policies and procedures, see which controls ran and which evidence is missing, review your risk register, and work through your audit tasks.\n\nIt is for compliance managers, information security officers and the people who own controls and tasks in a company that uses Alchex. It needs an Alchex account: you sign in and choose one workspace, and every tool acts as you, with your role. Anything your role cannot do in the app, it cannot do here. Read tools change nothing. Write tools, such as updating a task, adding a note or submitting an approval, change only what you asked for, and the reply says what changed and where.\n\nIt does not give legal advice, certify you against a standard, make payments, or reach any workspace other than the one you chose.",
        "developerName": "Alchex",
        "category": "Business & Operations",
        "capabilities": [
          "Read",
          "Write"
        ],
        "websiteURL": "https://alchex.com",
        "supportURL": "https://alchex.com/docs/intelligence/connect-your-ai-assistant",
        "privacyPolicyURL": "https://alchex.com/privacy",
        "termsOfServiceURL": "https://alchex.com/terms",
        "defaultPrompt": [
          "Where do we stand on ISO 27001?",
          "Which of my tasks are due this week?",
          "Which controls are missing evidence?"
        ],
        "brandColor": "#4F46E5",
        "brandColorDark": "#4F46E5",
        "composerIcon": "./assets/icon.png",
        "composerIconDark": "./assets/icon.png",
        "logo": "./assets/logo.png",
        "logoDark": "./assets/logo.png",
        "screenshots": []
      },
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "Overall standing against the workspace's standards",
              "prompt": "Give me an overview of where we stand on compliance.",
              "tools_triggered": "get_compliance_overview",
              "expected_behavior": "Summarises each standard in the workspace with its progress and the open clauses, using only workspace data."
            },
            {
              "description": "Find and read a policy",
              "prompt": "Find our information security policy and summarise what it says about access control.",
              "tools_triggered": "query_documents, get_document",
              "expected_behavior": "Searches the workspace documents, opens the matching policy and summarises its access-control section, naming the document."
            },
            {
              "description": "The person's own task list",
              "prompt": "What tasks are assigned to me?",
              "tools_triggered": "get_task_list",
              "expected_behavior": "Lists the signed-in person's open tasks with their due dates and status."
            },
            {
              "description": "Control health and missing evidence",
              "prompt": "Which of our controls have failed or have no recent evidence?",
              "tools_triggered": "find_controls",
              "expected_behavior": "Lists the controls whose last run failed or has no evidence, and what each one checks."
            },
            {
              "description": "What a clause requires",
              "prompt": "What does ISO 27001 clause 6.1.2 require, and what do we have for it?",
              "tools_triggered": "get_clause",
              "expected_behavior": "Quotes the clause's requirement and lists what the workspace holds against it."
            }
          ],
          "negative": [
            {
              "description": "Payments are out of scope",
              "prompt": "Pay our ISO certification body's invoice."
            },
            {
              "description": "No bulk destruction",
              "prompt": "Delete everything in my Alchex workspace."
            },
            {
              "description": "No access outside the chosen workspace",
              "prompt": "Show me the documents of another company's Alchex workspace."
            }
          ]
        },
        "demo_recording_url": "https://drive.google.com/file/d/1MVt-Qc_Bob5OgUXhtpou9Dqh4fvq7jw1/view?usp=sharing",
        "commerce": false,
        "commerce_description": ""
      },
      "publication": {
        "countries": [],
        "release_notes": "First release: read and work in your Alchex workspace from ChatGPT.",
        "translations": {}
      },
      "apps": "./.app.json"
    }
  }
}