neo-iso-27701
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official domains for ISO (iso.org) and IEC (iec.ch) to facilitate version and regulatory status verification. These are recognized international standards bodies and the usage is consistent with the skill's purpose.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to analyze user-provided PII processing documentation and regulatory texts. However, the instructions mitigate this risk by requiring the agent to distinguish verified evidence from inferences and to explicitly report missing data.
- [SAFE]: The skill implements robust safety boundaries, including a strict prohibition against outputting personal data, credentials, or sensitive tokens, and ensures a focus on management system frameworks rather than legal conclusions.
Audit Metadata