information-security-manager-iso27001
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Detailed inspection of the skill instructions, scripts, and reference documents shows no evidence of malicious intent or suspicious patterns. The functionality is consistent with its stated purpose of managing cybersecurity governance and ISO 27001 certification readiness.- [COMMAND_EXECUTION]: The skill documentation provides instructions for running local Python scripts (
compliance_checker.pyandrisk_assessment.py) to automate reporting tasks. These scripts are self-contained, do not have external dependencies, and perform standard file operations (reading and writing CSV/JSON/Markdown) only on user-provided paths.- [INDIRECT_PROMPT_INJECTION]: The provided scripts ingest external data from CSV files to populate risk registers and compliance reports. While this establishes a data ingestion surface, the scripts use safe parsing libraries and do not interpolate untrusted content into sensitive execution environments or agent prompts in an unsafe manner.
Audit Metadata