← Files DigiTrust Evidence AssistantARCHIVED FILE

.codex-plugin/plugin.json

3.86 KB · Nov 9, 2026 · 00:32 UTC

↓ Download file

See the change to this file →

{
  "author": {
    "name": "DigiTrans LLC"
  },
  "description": "Review vendor evidence for security reviews and procurement due diligence. DigiTrust Evidence Assistant helps security reviewers, procurement teams, and third-party risk teams organize selected non-sensitive claims and source excerpts for human review.\n\nMap vendor claims to supplied evidence, find missing references and source details, check exact quotations and supplied dates, and prepare focused reviewer questions. Use a synthetic vendor review to try the workflow before selecting your own permitted material.\n\nResults help you organize a review; they do not verify factual truth, source authenticity, compliance or permission to share. Synthetic examples are also available. The Assistant does not access private workspaces, fetch source links, retain submitted review content in application storage, or approve external use. Share only material you have explicitly confirmed is non-sensitive and permitted to send to DigiTrans.",
  "interface": {
    "capabilities": [
      "Vendor evidence review",
      "Security evidence gap checks",
      "Procurement reviewer questions",
      "Quotation and date checks"
    ],
    "category": "Business & Operations",
    "defaultPrompt": [
      "Review non-sensitive vendor evidence for procurement. First confirm the claims and excerpts I permit you to send to DigiTrans.",
      "Check quotes and dates for a vendor security review. First confirm the non-sensitive content I permit you to send to DigiTrans.",
      "Show a synthetic procurement evidence review with missing evidence, quotation mismatches, and questions for a human reviewer."
    ],
    "developerName": "DigiTrans LLC",
    "displayName": "DigiTrust Evidence Assistant",
    "longDescription": "Review vendor evidence for security reviews and procurement due diligence. DigiTrust Evidence Assistant helps security reviewers, procurement teams, and third-party risk teams organize selected non-sensitive claims and source excerpts for human review.\n\nMap vendor claims to supplied evidence, find missing references and source details, check exact quotations and supplied dates, and prepare focused reviewer questions. Use a synthetic vendor review to try the workflow before selecting your own permitted material.\n\nResults help you organize a review; they do not verify factual truth, source authenticity, compliance or permission to share. Synthetic examples are also available. The Assistant does not access private workspaces, fetch source links, retain submitted review content in application storage, or approve external use. Share only material you have explicitly confirmed is non-sensitive and permitted to send to DigiTrans.",
    "privacyPolicyURL": "https://www.digitranshq.com/privacy/digitrust-evidence-assistant/",
    "shortDescription": "Procurement & vendor evidence",
    "supportURL": "https://www.digitranshq.com/contact",
    "termsOfServiceURL": "https://www.digitranshq.com/terms/",
    "websiteURL": "https://www.digitranshq.com/evidence-assistant/",
    "logo": "./assets/icon.png",
    "composerIcon": "./assets/icon.png"
  },
  "name": "app-6a47df86d9c8819189c7b9d6ab4a97bf",
  "version": "2.1.2",
  "keywords": [
    "procurement",
    "vendor evidence",
    "vendor review",
    "security review",
    "third-party risk",
    "evidence gaps",
    "quotation checks",
    "evidence freshness"
  ],
  "extensions": {
    "com.openai": {
      "publication": {
        "release_notes": "Packaging-only correction to approved version 2.1.1: restore the declaration for the existing DigiTrust Evidence Assistant MCP server at https://mcp.digitranshq.com/mcp and its existing no-authentication connection. Preserve the approved procurement and vendor evidence listing content, starter prompts, icon, tools, permissions, data handling, and country targeting."
      }
    }
  },
  "mcpServers": "./.mcp.json",
  "apps": "./.app.json"
}

SHA-256: 20d4303fcc83a514a32402cda3009c48584c09552f59028ae0e6ec2df61e9eb0