isms-audit-expert
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
isms_audit_scheduler.pyscript provides a mechanism to ingest external data that can influence the agent's context.\n - Ingestion points: The
load_controls_from_csvfunction inscripts/isms_audit_scheduler.pyreads content from files specified via the--controlscommand-line argument.\n - Boundary markers: The script does not use delimiters or provide instructions to the agent to ignore potentially malicious content within the parsed CSV data.\n
- Capability inventory: The skill allows the script to write generated audit plans to the file system using the
--outputparameter and produces output intended for agent consumption.\n - Sanitization: The tool does not perform sanitization, escaping, or validation of the input strings (such as control names or risk levels) before including them in the final JSON or Markdown output.
Audit Metadata