iso27001-audit-prep
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill defines a structured workflow for compliance auditing using internal resources.
- [COMMAND_EXECUTION]: The skill utilizes command-line instructions to run local Python scripts (
isms_audit_scheduler.py,audit_simulator.py,cross_framework_mapper.py) for processing audit data. These scripts are located within the agent's internal vendor or local skill directories. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local files (
audit_scope.json,iso27001_scope.json,program.json) to perform analysis. This creates a surface for indirect prompt injection if those files contain adversarial instructions. - Ingestion points:
audit_scope.json,iso27001_scope.json,program.json(SKILL.md). - Boundary markers: None specified in the instruction text.
- Capability inventory: Local Python script execution and file access.
- Sanitization: Not explicitly documented in the skill instructions.
Audit Metadata