ism

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions solely as a knowledge-based advisor for the Australian Information Security Manual (ISM). It provides informational guidance on risk management, control selection, and IRAP assessment preparation without requiring dangerous permissions or executing code.
  • [SAFE]: All referenced external links point to legitimate and official sources, including the Australian Signals Directorate's official website (cyber.gov.au) and the official GitHub repository for the ISM OSCAL releases (github.com/AustralianCyberSecurityCentre). These are recognized as safe and authoritative domains.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscation was found. The instructions maintain a professional, consultative tone and include standard disclaimers regarding official authorization decisions.
  • [SAFE]: The skill uses static reference files (guidelines-overview.md and control-applicability.md) to provide context, which is a secure method for extending an agent's knowledge base without relying on external or untrusted runtime execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 07:33 PM
Security Audit — agent-trust-hub — ism