isms-audit-expert
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate security auditing tool with well-defined functionality and documentation. No malicious patterns were detected across any of the analyzed files.
- [COMMAND_EXECUTION]: The skill includes a local Python utility (
scripts/isms_audit_scheduler.py) to automate audit scheduling. This script uses standard Python libraries (argparse, csv, json, datetime) and performs transparent file operations without any use of dangerous functions like eval(), exec(), or subprocess calls. - [DATA_EXPOSURE]: There is no evidence of sensitive data access or exfiltration. The skill does not perform network operations and focuses on processing auditing data provided by the user in a local context.
- [PROMPT_INJECTION]: The instructions and reference materials are purely technical and instructional. No attempts to override agent behavior, bypass safety guidelines, or extract system prompts were identified.
Audit Metadata