iso-27001-evidence-collection
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a library of shell commands for GitHub, GCP, Azure, and Google Workspace to export system configurations and logs. These commands are intended for manual execution by the user to generate audit-ready evidence packages.\n- [EXTERNAL_DOWNLOADS]: Instructions are provided for installing official management tools from well-known vendors, such as the Google Cloud SDK and Azure CLI, using standard package managers.\n- [DATA_EXFILTRATION]: Evidence collection procedures involve reading system configurations and security policies. The skill explicitly guides the user to save this data locally within the project's evidence/ directory.\n- [INDIRECT_PROMPT_INJECTION]: The skill can process local markdown files within a compliance/ directory to track evidence status. This creates a standard ingestion surface for local data management.
Audit Metadata