ism
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions solely as a knowledge-based advisor for the Australian Information Security Manual (ISM). It provides informational guidance on risk management, control selection, and IRAP assessment preparation without requiring dangerous permissions or executing code.
- [SAFE]: All referenced external links point to legitimate and official sources, including the Australian Signals Directorate's official website (cyber.gov.au) and the official GitHub repository for the ISM OSCAL releases (github.com/AustralianCyberSecurityCentre). These are recognized as safe and authoritative domains.
- [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscation was found. The instructions maintain a professional, consultative tone and include standard disclaimers regarding official authorization decisions.
- [SAFE]: The skill uses static reference files (
guidelines-overview.mdandcontrol-applicability.md) to provide context, which is a secure method for extending an agent's knowledge base without relying on external or untrusted runtime execution.
Audit Metadata