Rate ISO 27001 Annex A controls and generate a Markdown RAG report.
npx skills add https://github.com/gombing/ISO27001Agent --skill annex-review
Please help me install this Agent Skill. Skill: annex-review Source: https://github.com/gombing/ISO27001Agent/tree/main/annex-review Command: npx skills add https://github.com/gombing/ISO27001Agent --skill annex-review
This capability enables consistent, auditable assessment of ISO 27001 Annex A controls by providing a structured framework to rate control implementation and generate an actionable Annex A RAG report.
Run the annex-review skill to begin evaluating Annex A controls and generate the RAG report.
High-intent search queries and answers about installing and using this skill.
Assess ISO 27001 Annex A controls by guiding a step-by-step evaluation across 11 control groups from A.5 to A.8, capturing Green/Amber/Red ratings and gap notes to produce a consolidated RAG report.
A RAG report for ISO 27001 Annex A is a consolidated document rating control implementation status as Red, Amber, or Green. It includes per-control details, gap notes, and a synthesized executive summary for actionable audit reporting.
Rate ISO 27001 Annex A control implementation status by stepping through 11 control groups via interactive prompts, assigning a Green, Amber, or Red rating and documenting gap notes for each individual control.
The ISO 27001 Annex A audit review requires a stable engagement directory for output. It uses Bash-based prompts and stores the final Markdown RAG report under the engagements folder with a date and client name.
You can load engagement context and scope from client engagement briefs. The skill uses this input to frame the A.5 through A.8 control assessment and structure the final Annex A RAG report output.
The best way to document ISO 27001 Annex A gaps is through a structured RAG framework that captures evidence ratings and gap notes during assessment, generating a client-facing Markdown document with a synthesized executive summary.
dtsongTransform natural language project descriptions into structured engagement briefs.
pluginagentmarketplaceGenerate security assessment reports from structured findings in Markdown, HTML, PDF, or DOCX.
stakworkTrack regulatory compliance gaps and update their remediation status.
tapanshahManage ISO 27001 ISMS design, risk assessment, and compliance checks.
