isms-audit-expert
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [SAFE]: The skill provides structured expert guidance for Information Security Management System (ISMS) auditing and ISO 27001 certification. All instructions are consistent with professional security auditing practices.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external documentation, audit evidence, and technical logs. While this creates a vulnerability surface for indirect prompt injection, it is a functional requirement of the auditing task and no exploitable capabilities or malicious capability chains were identified in the provided content.\n- [COMMAND_EXECUTION]: The instructions reference several automation scripts (e.g.,
security-control-tester.py,isms-audit-scheduler.py) to perform technical verification and audit planning. These tools are scoped to the skill's primary function and appear to be local components.\n- [NO_CODE]: The skill refers to numerous scripts in thescripts/directory and guides in thereferences/directory that are not present in the provided package, which contains only placeholder files likeexample.pyandapi_reference.md.
Audit Metadata