isms-audit-expert

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONNO_CODE
Full Analysis
  • [SAFE]: The skill provides structured expert guidance for Information Security Management System (ISMS) auditing and ISO 27001 certification. All instructions are consistent with professional security auditing practices.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external documentation, audit evidence, and technical logs. While this creates a vulnerability surface for indirect prompt injection, it is a functional requirement of the auditing task and no exploitable capabilities or malicious capability chains were identified in the provided content.\n- [COMMAND_EXECUTION]: The instructions reference several automation scripts (e.g., security-control-tester.py, isms-audit-scheduler.py) to perform technical verification and audit planning. These tools are scoped to the skill's primary function and appear to be local components.\n- [NO_CODE]: The skill refers to numerous scripts in the scripts/ directory and guides in the references/ directory that are not present in the provided package, which contains only placeholder files like example.py and api_reference.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 07:37 PM