@probo/skills 0.3.2 → 0.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude-plugin/plugin.json +1 -1
- package/.codex-plugin/plugin.json +1 -1
- package/package.json +1 -1
- package/plugin.json +1 -1
- package/skills/access-review/references/mcp-tools.md +4 -0
- package/skills/compliance-portal-commitments/SKILL.md +3 -1
- package/skills/missing-signatures/references/mcp-tools.md +3 -1
- package/skills/open-source-compliance/SKILL.md +5 -2
package/package.json
CHANGED
package/plugin.json
CHANGED
|
@@ -22,6 +22,10 @@ required input, so it serves two distinct purposes:
|
|
|
22
22
|
Either way the organization must be resolved before `listAccessReviewCampaigns`,
|
|
23
23
|
which requires `organization_id`.
|
|
24
24
|
|
|
25
|
+
Each organization includes `name` (operating name) and `legal_name` (registered
|
|
26
|
+
legal name, null when unset). Match the organization the user named against
|
|
27
|
+
`name`. Use `legal_name` when a note or report must name the legal entity.
|
|
28
|
+
|
|
25
29
|
## Read
|
|
26
30
|
|
|
27
31
|
### `listAccessReviewCampaigns`
|
|
@@ -50,7 +50,9 @@ Commitments must trace to controls the company genuinely has. The source of trut
|
|
|
50
50
|
1. **Find the Probo MCP and the organization.** This environment may expose more than one Probo MCP
|
|
51
51
|
server (the plugin ships hosted `probo-us` and `probo-eu`, and self-hosted instances add their own).
|
|
52
52
|
Call `listOrganizations` on each until you find the one that returns the target company, and use that
|
|
53
|
-
server for every later call. Match the organization the user named
|
|
53
|
+
server for every later call. Match the organization the user named on `name` (the operating name) and
|
|
54
|
+
capture its `id`. `legal_name` is the registered legal name when set. The public group title still uses
|
|
55
|
+
the operating name. Use `legal_name` only when a commitment must name the legal entity.
|
|
54
56
|
2. **List the published policies.** Call `listDocuments` with `document_types: ["POLICY"]`. Policies with
|
|
55
57
|
a `current_published_major` are published.
|
|
56
58
|
3. **Read the actual content.** `getDocument` returns metadata only. To get the text, call
|
|
@@ -8,7 +8,9 @@ server configured in the agent). Read each tool schema before calling.
|
|
|
8
8
|
### `listOrganizations`
|
|
9
9
|
|
|
10
10
|
List organizations the caller can access. Use to resolve `$ARGUMENTS` when the
|
|
11
|
-
user provides a name instead of a GID.
|
|
11
|
+
user provides a name instead of a GID. Match on `name` (operating name).
|
|
12
|
+
`legal_name` is the registered legal name when set; use it in the report title
|
|
13
|
+
when the document should name the legal entity, and `name` otherwise.
|
|
12
14
|
|
|
13
15
|
### `listUsers`
|
|
14
16
|
|
|
@@ -17,7 +17,10 @@ first.
|
|
|
17
17
|
`claude mcp login probo-us` to complete the OAuth 2.0 sign-in.
|
|
18
18
|
2. Identify the target organization. List organizations if the user did not
|
|
19
19
|
provide one, and when several servers are connected use the one that returns
|
|
20
|
-
the target organization.
|
|
20
|
+
the target organization. `listOrganizations` returns `name` (the operating
|
|
21
|
+
name) and `legal_name` (the registered legal name, null when unset). Match
|
|
22
|
+
the organization on `name`. When a policy, contract, or other legal document
|
|
23
|
+
must name the company, use `legal_name` when it is set and `name` otherwise.
|
|
21
24
|
3. Prefer MCP tools over manual API calls. The Probo MCP API mirrors the
|
|
22
25
|
platform's GraphQL surface.
|
|
23
26
|
|
|
@@ -32,7 +35,7 @@ first.
|
|
|
32
35
|
|
|
33
36
|
### Control and obligation tracking
|
|
34
37
|
|
|
35
|
-
1. List controls,
|
|
38
|
+
1. List controls, internal controls, or obligations relevant to the user's question.
|
|
36
39
|
2. Link evidence (documents, audits) where appropriate.
|
|
37
40
|
3. Report gaps between required and implemented controls.
|
|
38
41
|
|