iso-standards-readiness
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for local data validation and structural review of compliance evidence. No malicious patterns or security risks were identified.
- [COMMAND_EXECUTION]: The skill includes several Python scripts (e.g.,
gap_analyzer.py,validate_scope_intake.py) intended to be executed by the agent. Analysis of these scripts confirms they use only the Python standard library and do not perform arbitrary shell commands or unsafe system calls. - [EXTERNAL_DOWNLOADS]: No external dependencies are fetched; the skill relies entirely on bundled local files and the Python standard library.
- [DATA_EXFILTRATION]: The skill does not request or utilize network access. File operations are protected against path traversal in
scripts/_common.pyandscripts/validate_evidence_manifest.pyusing path resolution and strict relative path enforcement. - [PROMPT_INJECTION]: The instructions in
SKILL.mdare procedural and explicitly state boundaries, such as not making legal or certification decisions, which aligns with safe operation and avoids behavior-overriding patterns. - [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or attempts to access sensitive system directories (like
.sshor.aws) were detected.
Audit Metadata