isms-audit-expert
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected in the skill's instructions, metadata, or supporting documentation. The skill follows best practices for its stated purpose of ISMS auditing.
- [COMMAND_EXECUTION]: The provided Python script
scripts/isms_audit_scheduler.pyperforms legitimate local data processing tasks, such as reading control risk ratings from a CSV file and generating an audit plan in JSON or Markdown format. No dangerous shell commands, network operations, or unauthorized file access patterns were found. - [REMOTE_CODE_EXECUTION]: All scripts and documentation are local to the skill folder. No external dependencies are installed via package managers, and no remote scripts are downloaded or executed.
- [DATA_EXFILTRATION]: The skill does not perform any network requests or exfiltrate sensitive data. Access to files is restricted to user-provided input and output paths for the scheduling utility.
Audit Metadata