information-security-manager-iso27001

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Detailed inspection of the skill instructions, scripts, and reference documents shows no evidence of malicious intent or suspicious patterns. The functionality is consistent with its stated purpose of managing cybersecurity governance and ISO 27001 certification readiness.- [COMMAND_EXECUTION]: The skill documentation provides instructions for running local Python scripts (compliance_checker.py and risk_assessment.py) to automate reporting tasks. These scripts are self-contained, do not have external dependencies, and perform standard file operations (reading and writing CSV/JSON/Markdown) only on user-provided paths.- [INDIRECT_PROMPT_INJECTION]: The provided scripts ingest external data from CSV files to populate risk registers and compliance reports. While this establishes a data ingestion surface, the scripts use safe parsing libraries and do not interpolate untrusted content into sensitive execution environments or agent prompts in an unsafe manner.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:42 PM