Skill profile

iso27001

Expert ISO 27001 compliance assistant for security and compliance teams.

What this skill does for you

Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklists, policy writing, document generation, Statement of Applicability (SoA), risk assessment, risk registers, risk treatment plans, Annex A controls, ISMS implementation, clause requirements, certification readiness, transitioning from 2013 to 2022, control implementation guidance, incident response policies, access control policies, supplier security, or any information security management system (ISMS) topic. Trigger even if the user doesn't say "skill" : any ISO 27001 or ISMS question should use this skill.

Quoted from the skill description in the pinned source

Who made it

Publishersushegaad

Repositoryclaude-skills-governance-risk-and-compliance

Installs303as of Sep 27, 2026

Use it with Edge

Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the iso27001 skill from sushegaad/claude-skills-governance-risk-and-compliance.

Paste it into Claude, ChatGPT, Codex or Cursor.

Or read the skill source first.

Security evidence

Security state at 2026-09-30: reviewed. State definitions. This records static evidence for this revision; live load eligibility is checked again.

3 static scans, 0 counted findings. The listed scanners recorded the results shown for this package revision.

Scanner	Date	Result
Edge static checks	2026-09-27	Pass
Cisco skill-scanner	2026-09-27	Pass
Semgrep Edge rules	2026-09-27	Pass

Static scans check the code, not how well the skill works.

Scanner scope, raw findings and mirrored provider records

Edge static checks (Edge-run): edge-static/1.0.1. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 34832771581acef8751b25f284dcf270dc5e40c0. Raw findings: . Counted findings: .

Cisco skill-scanner (Edge-run): cisco-skill-scanner/2.1.0. Scope: Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis. Revision: 34832771581acef8751b25f284dcf270dc5e40c0. Raw findings: 1. Counted findings: .

Semgrep Edge rules (Edge-run): semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1. Scope: Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded. Revision: 34832771581acef8751b25f284dcf270dc5e40c0. Raw findings: . Counted findings: .

Source and licence

Repository: https://github.com/sushegaad/claude-skills-governance-risk-and-compliance
Pinned skill file: View source at revision
Revision: 34832771581acef8751b25f284dcf270dc5e40c0
Package hash: sha256:c7f41980617fad90d7d8589b712f7fbde6781c1e2871fde69b2badddb20facd8
Licence: MIT