iso27001
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill consists of instructional text and templates for ISO 27001 compliance. It does not contain scripts, binaries, or commands that execute external code or access local resources.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided details regarding organizational scope and risk assessments.
- Ingestion points: User input provided in prompts (e.g., descriptions of organizational scope, technological boundaries, or risk treatment plans).
- Boundary markers: None present; the skill treats user-provided context as direct input for mapping.
- Capability inventory: None; the skill's only capability is generating text-based compliance summaries and priorities. There are no subprocess calls, file-write operations, or network requests.
- Sanitization: None; as the skill only generates text responses, the risk of technical exploitation through prompt injection is negligible.
Audit Metadata