isms-audit-expert
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a professional framework for ISO 27001 compliance. All instructions and methodologies align with industry-standard auditing practices and maintain auditor independence rules.
- [SAFE]: Local script execution is limited to
scripts/isms_audit_scheduler.py, which is used for generating audit plans. This is a vendor-supplied resource used for documented administrative functions without external dependencies or remote code execution patterns. - [SAFE]: Technical verification procedures for cloud environments (AWS and Azure) are focused on compliance auditing (e.g., checking MFA status, S3 bucket policies, and logging configuration) and do not involve unauthorized access or persistence mechanisms.
- [SAFE]: No evidence of prompt injection, credential harvesting, or malicious data handling was found. The skill's metadata and instructional content are consistent with its stated purpose of ISMS audit support.
Audit Metadata