plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "wolfia",
  "version": "1.0.0",
  "description": "Answer security questionnaires and customer security questions from your approved Wolfia knowledge base, with a citation for every answer.",
  "author": {
    "name": "Wolfia",
    "email": "support@wolfia.com",
    "url": "https://wolfia.com"
  },
  "homepage": "https://wolfia.com/blog/connect-wolfia-to-claude-and-chatgpt",
  "keywords": [
    "security questionnaires",
    "compliance",
    "trust center",
    "knowledge base"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Wolfia",
        "shortDescription": "Cited security answers",
        "longDescription": "Wolfia keeps a company's approved security, privacy and compliance knowledge in sync: policies, audit reports, trust center documents and past questionnaire answers. Connect it to ChatGPT and ChatGPT answers from that approved knowledge instead of guessing, cites the source of every answer, and acts with your own Wolfia role.\n\nWith Wolfia in ChatGPT you can ask a security or compliance question and get a cited answer, find a policy, report or trust center document and get a download link, look up what you told a customer in past questionnaires, see which questionnaire answers still need attention, and edit, approve or regenerate them.\n\nEvery action runs as the signed-in user, inside their organization, so ChatGPT only sees and changes what that user can see and change in Wolfia. Changes that are hard to undo wait for a Wolfia Admin to approve them in Wolfia.\n\nYou need a Wolfia account in your organization. Sign in with your usual Wolfia login, SSO or email, and approve the consent screen that names ChatGPT as the destination.",
        "developerName": "Wolfia",
        "category": "Security",
        "capabilities": [
          "Answer security and compliance questions with citations",
          "Find policies, reports and trust center documents",
          "Look up past questionnaire answers",
          "Review, edit and approve questionnaire answers",
          "Export finished questionnaires"
        ],
        "websiteURL": "https://wolfia.com",
        "supportURL": "https://wolfia.com/support",
        "privacyPolicyURL": "https://wolfia.com/privacy",
        "termsOfServiceURL": "https://wolfia.com/terms",
        "defaultPrompt": [
          "How do we encrypt customer data at rest and in transit?",
          "Find our latest SOC 2 report and give me a download link.",
          "Which answers in my latest questionnaire need attention?"
        ],
        "brandColor": "#EA4B38",
        "brandColorDark": "#EA4B38",
        "composerIcon": "./assets/icon.png",
        "composerIconDark": "./assets/icon-dark.png",
        "logo": "./assets/logo.png",
        "logoDark": "./assets/logo-dark.png"
      },
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "Answer a security question with citations from the knowledge base",
              "prompt": "Using Wolfia, how do we encrypt customer data at rest and in transit? Cite the sources.",
              "tools_triggered": "search_knowledge",
              "expected_behavior": "States that customer data is encrypted at rest with AES-256 and in transit with TLS 1.2 or higher, and cites the Demo Company encryption and security policy documents."
            },
            {
              "description": "Find a document and return a download link",
              "prompt": "Find our business continuity plan in Wolfia and give me a link to download it.",
              "tools_triggered": "list_sources, get_document_download_urls",
              "expected_behavior": "Finds the Demo Company Business Continuity Plan and returns a working download link for it."
            },
            {
              "description": "List the subprocessors from the knowledge base",
              "prompt": "According to Wolfia, which subprocessors do we use?",
              "tools_triggered": "search_knowledge",
              "expected_behavior": "Lists the subprocessors named in the Demo Company vendor management policy, including AWS, Google Workspace, Datadog, Zendesk, Stripe, Twilio SendGrid and PagerDuty, with a citation."
            },
            {
              "description": "Review questionnaire answers that need attention",
              "prompt": "In Wolfia, which answers in my most recent questionnaire still need attention? Show me the first three.",
              "tools_triggered": "list_questionnaires_for_org, get_questionnaire_status, get_questionnaire_answers",
              "expected_behavior": "Opens the Demo Company Vendor Security Questionnaire and lists up to three questions whose answers are missing or not yet approved."
            },
            {
              "description": "Edit one questionnaire answer",
              "prompt": "In my most recent Wolfia questionnaire, change the answer to the penetration testing question to: An independent firm tests our application and infrastructure every year.",
              "tools_triggered": "list_questionnaires_for_org, get_questionnaire_answers, edit_questionnaire_answer",
              "expected_behavior": "Finds the penetration testing question in the Demo Company Vendor Security Questionnaire, replaces its answer with the given text, and confirms the change."
            }
          ],
          "negative": [
            {
              "description": "Money transfer is not something Wolfia does; the plugin should not act and should say it cannot make payments.",
              "prompt": "Use Wolfia to pay $500 to our vendor's bank account."
            },
            {
              "description": "Data from another organization is outside the signed-in user's access; the plugin should explain it can only read the user's own Wolfia organization.",
              "prompt": "Show me the security questionnaire answers another company gave to their customers in Wolfia."
            },
            {
              "description": "A request unrelated to security or compliance knowledge; ChatGPT should answer without calling Wolfia.",
              "prompt": "Write a short poem about the ocean."
            }
          ]
        },
        "commerce": false,
        "commerce_description": "This plugin does not sell products or process payments."
      },
      "publication": {
        "release_notes": "First release: cited answers from the Wolfia knowledge base, document links, questionnaire review, editing, approval and export."
      },
      "apps": "./.app.json"
    }
  }
}