Install from your coding agent (plugin)
Install the heyGRC setup skill into Claude Code, Codex CLI, GitHub Copilot CLI, Cursor, or Gemini CLI. The agent walks the GitHub App install and configuration with you.
The heyGRC agent plugin is a setup skill, not a second reviewer. It teaches your coding agent the heyGRC flow: attach the GitHub App, claim the install, write your company profile and selected frameworks as code with one API call, and choose the review cadence. The review itself always runs server-side through the heyGRC GitHub App; the plugin does not review code on your machine and never blocks a merge.
One portable repo works across five agents: better-isms/heygrc-plugin (MIT, by Better ISMS).
Install commands
| Agent | Command |
|---|---|
| Claude Code | /plugin marketplace add better-isms/heygrc-plugin then /plugin install heygrc@heygrc, run /heygrc:review |
| Codex CLI | codex plugin marketplace add better-isms/heygrc-plugin |
| GitHub Copilot CLI | copilot plugin marketplace add better-isms/heygrc-plugin then copilot plugin install heygrc@heygrc |
| Cursor | Load the repo as an Agent Plugin (root plugin.json) from Customize |
| Gemini CLI | gemini extensions install https://github.com/better-isms/heygrc-plugin |
| Any Agent Skills client | npx skills add better-isms/heygrc-plugin |
After install, ask your agent to set up heyGRC compliance review. It will hand you the right install link for the tool it runs in.
What the agent does
- GitHub App install (you click once): your agent sends you the App install link with a source tag for the tool it runs in. Installing is an account-owner action no agent or API can do for you. A bare install already reviews PRs with default frameworks under Free-plan limits.
- Claim and configure: you sign in at app.heygrc.com to claim the
install (this starts the 14-day trial) and create an
hgrc_…API key. The agent then writes your company profile and frameworks with a singlePUT /v1/configcall. - Cadence: the agent sets
auto,auto_once, ormention_onlywith you.
Full walkthrough: Set up with your agent. Pricing is unchanged: public repos free, private repos 25 reviews/month free, claim-only trial.
GitHub Copilot custom agent file
If your team uses GitHub Copilot, you can also drop a ready-made custom agent file into your
repository at .github/agents/heygrc-compliance-review.agent.md:
https://raw.githubusercontent.com/better-isms/heygrc-plugin/main/.github/agents/heygrc-compliance-review.agent.mdCopilot then knows how to check whether heyGRC is installed, walk the App install, and configure frameworks as code in your repo. Same skill, same GitHub App, no extra tool.
Where the plugin is listed
The plugin is published in the OpenAI/ChatGPT Plugins Directory, indexed on skills.sh and SkillsMP, and installable from its self-hosted marketplace in Claude Code, Codex CLI, and GitHub Copilot CLI. The heyGRC GitHub App is separately listed on the GitHub Marketplace.
Set up with your agent
Point your AI coding agent at the heyGRC docs to install the GitHub App, connect your org, and configure frameworks.
Configure US frameworks
Select SOC 2, HIPAA, CCPA, and other US catalog IDs on an existing heyGRC org. GET the current config, merge IDs, PUT the full state, then read back.