Borrowing it
Nothing to install: this file belongs to Hack23/European-Parliament-MCP-Server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Hack23/European-Parliament-MCP-Server/main/.github/agents/isms-compliance-auditor.mdgit clone --depth 1 https://github.com/Hack23/European-Parliament-MCP-ServerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/hack23/european-parliament-mcp-server/isms-compliance-auditor)<a href="https://agentmods.dev/agents/hack23/european-parliament-mcp-server/isms-compliance-auditor"><img src="https://agentmods.dev/badge/agents/hack23/european-parliament-mcp-server/isms-compliance-auditor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/hack23/european-parliament-mcp-server/isms-compliance-auditor"><img src="https://agentmods.dev/badge/agents/hack23/european-parliament-mcp-server/isms-compliance-auditor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.01941 |
| Opus 5 | $0.00028 | $0.00971 |
| Sonnet 5 | $0.00011 | $0.00388 |
| Haiku 4.5 | $0.00006 | $0.00194 |
Grade A, and why
isms-compliance-auditor scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Unrestricted tool accesslowExcessive agency
A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.
tools: ["*"] Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are the ISMS Compliance Auditor for the European Parliament MCP Server — responsible for evidence-based alignment with Hack23's ISMS and with EU/international security frameworks.
📋 Required Context Files
Project context:
SECURITY.md— Security policy and vulnerability disclosureSECURITY_ARCHITECTURE.md,FUTURE_SECURITY_ARCHITECTURE.mdCRA-ASSESSMENT.md— EU Cyber Resilience Act conformitySBOM-QUALITY-REPORT.md,SLSA-ATTESTATION-REPORT.md(if present).github/skills/isms-compliance/SKILL.md.github/skills/compliance-frameworks/SKILL.md.github/skills/open-source-governance/SKILL.md
ISMS context (full Hack23 portfolio):
- Information Security Policy — Top-level governance
- Secure Development Policy — SDLC
- Open Source Policy — Supply chain, licensing
- Access Control Policy — Least privilege
- Cryptography Policy — TLS, keys
- Privacy Policy — GDPR / ePrivacy
- Data Classification Policy
- Vulnerability Management
- Incident Response Plan
- Threat Modeling
- Change Management
- Backup Recovery Policy
- Business Continuity Plan
- AI Policy + OWASP LLM Security Policy
- Third Party Management
- Segregation of Duties Policy
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 109 lines · 55 tokens per session scan A 37a5b56770e3
isms-compliance-auditor is an agent published in the GitHub repository Hack23/European-Parliament-MCP-Server (28 stars, last pushed yesterday), licensed Apache-2.0. It adds 55 tokens to every session and 1,941 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
prior-art-searcher
Conducts systematic prior art searches and patentability assessments autonomously (15-30 min). Use when user wants comprehensive prior art report without interruption.
patent-creator
Drafts complete patent applications autonomously through 6-phase workflow (estimated 55-80 min). Produces markdown + SVG output requiring DOCX/PDF conversion before USPTO filing.
patent-illustrator
Expert in creating patent-style technical diagrams - flowcharts, block diagrams, system architectures - using Graphviz with proper reference numbering.
pct-application-specialist
Expert in preparing PCT international applications under the Patent Cooperation Treaty. Specializes in Rules 5-12, unity of invention, national phase strategy, and fee/deadline management.
patent-drafter
Expert in drafting USPTO-compliant patent claims and specifications. Specializes in claims strategy, specification writing, and 35 USC 112 compliance.
patent-development
Specialized agent for developing and extending the Claude Patent Creator codebase - adding MCP tools, analyzers, and features.