iso-27001-evidence-collection

iso-27001-evidence-collection is a skill for Claude Code, Codex from serejaris/kimi-skills. It costs 68 tokens per session (3,040 once invoked), scanned A, a copy of iso-27001-evidence-collection, MIT.

A procedure for collecting and checking evidence needed for ISO 27001 and SOC 2 audits. These are security and service-control standards that require organizations to show how their controls work.

In plain words
What is it for?
Use it to prepare audit evidence packages, refresh evidence periodically, prove that findings were fixed, onboard systems into audit scope, and identify evidence gaps.
Why use it?
It organizes evidence by control and highlights missing or outdated material before an auditor reviews it. The evidence remains on the local filesystem and uses existing credentials.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to prepare audit evidence packages, refresh evidence periodically, prove that findings were fixed, onboard systems into audit scope, and identify evidence gaps.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/serejaris/kimi-skills/iso-27001-evidence-collection
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add serejaris/kimi-skills --skill iso-27001-evidence-collection
Clone the repo
git clone --depth 1 https://github.com/serejaris/kimi-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for iso-27001-evidence-collection

README.md
[![agentmods](https://agentmods.dev/badge/skills/serejaris/kimi-skills/iso-27001-evidence-collection/github.svg)](https://agentmods.dev/skills/serejaris/kimi-skills/iso-27001-evidence-collection)
Your own site
<a href="https://agentmods.dev/skills/serejaris/kimi-skills/iso-27001-evidence-collection"><img src="https://agentmods.dev/badge/skills/serejaris/kimi-skills/iso-27001-evidence-collection/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for iso-27001-evidence-collection

Your own site · 80×15
<a href="https://agentmods.dev/skills/serejaris/kimi-skills/iso-27001-evidence-collection"><img src="https://agentmods.dev/badge/skills/serejaris/kimi-skills/iso-27001-evidence-collection.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 68 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,040 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 89% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00068 $0.03040
Opus 5 $0.00034 $0.01520
Sonnet 5 $0.00014 $0.00608
Haiku 4.5 $0.00007 $0.00304

Measured 9d ago against content hash a7ef33f81b4f, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

iso-27001-evidence-collection scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

89% identical to iso-27001-evidence-collection — 31 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/iso-27001-evidence-collection/SKILL.md · 298 lines

How it starts

The opening of the file, as written. The whole thing — 298 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ISO 27001 Evidence Collection

Systematically collect audit evidence for ISO 27001:2022 and SOC 2. This skill provides API-first evidence collection commands, organizes evidence by control, and validates completeness before auditor review.

Security Model

  • No scripts executed — this skill is markdown-only procedural guidance
  • No secrets required — works with reference checklists; CLI commands use existing local credentials
  • Evidence stays local — all outputs go to the local filesystem
  • IP-clean — references NIST SP 800-53 (public domain); ISO controls cited by section ID only

When to Use

Activate this skill when:

  1. Preparing evidence package for external audit — 2-4 weeks before auditor arrives
  2. Quarterly evidence refresh — update evidence that has aged beyond the audit window
  3. After remediation — collect evidence proving a finding has been fixed
  4. New system onboarding — establish baseline evidence for a newly in-scope system
  5. Evidence gap analysis — identify what's missing before the audit

Do NOT use for:

  • Running the internal audit itself — use iso-27001-internal-audit
  • SOC 2-only readiness assessment — use soc2-readiness
  • Interpreting audit findings — use the internal audit skill

Core Concepts

Evidence Hierarchy (Best to Worst)

Rank Type Example Why Better
1 API export (JSON/CSV) gcloud iam service-accounts list --format=json Timestamped, tamper-evident, reproducible
2 System-generated report SOC 2 report from vendor, SIEM export Authoritative source, includes metadata
3 Configuration export Terraform state, policy JSON Shows intended state, version-controlled
4 Screenshot with system clock screencapture -x ~/evidence/... Visual proof, but harder to validate
5 Manual attestation Signed statement by responsible person Last resort, requires corroboration

Evidence Freshness Requirements

Read the full file on GitHub · 298 lines

Files

What ships with it

5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 298 lines · 68 tokens per session scan A a7ef33f81b4f

Subscribe to this mod's changes

iso-27001-evidence-collection is a skill published in the GitHub repository serejaris/kimi-skills (6 stars, last pushed 1mo ago), licensed MIT. It adds 68 tokens to every session and 3,040 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 89% identical to iso-27001-evidence-collection, differing in 31 lines, and is treated as a copy.

Related

Other skills, from other repositories

fiscaliste

Fiscaliste IA pour la fiscalité personnelle des particuliers français : optimisation et déclaration de l'impôt sur le revenu, IFI, revenus du capital, revenus fonciers, equity salarial, crypto-actifs et PER. Couvre le calcul de l'IR (barème, quotient familial, décote, PAS, CEHR, revenus exceptionnels), la déclaration…

romainsimon/paperasse · 302 tokens

controleur-fiscal

Inspecteur des finances publiques IA. Simule un contrôle fiscal DGFIP complet sur les comptes d'une entreprise française (SASU, EURL, SAS, SARL). Analyse le FEC, la liasse fiscale, les charges déduites, le compte courant d'associé, la TVA, l'IS selon 8 axes de vérification. Identifie les chefs de redressement…

romainsimon/paperasse · 136 tokens

notaire

Notaire IA pour le droit immobilier, les successions, les donations, le droit de la famille et le droit des sociétés en France. Copilote juridique pour la préparation d'actes, le conseil patrimonial, les calculs de frais et la vérification de conformité. Couvre le calcul des frais de notaire (DMTO, émoluments…

romainsimon/paperasse · 221 tokens

commissaire-aux-comptes

Commissaire aux comptes IA pour l'audit des comptes annuels d'entreprises françaises. Applique la démarche NEP en 7 phases : prise de connaissance, contrôle du FEC, vérification du bilan, du compte de résultat, de la balance, de la liasse fiscale, et contrôles transversaux. Émet une opinion motivée sur la fiabilité…

romainsimon/paperasse · 123 tokens

neo-iso-27001

Use this skill when the user needs to establish, review, or improve an ISO/IEC 27001 ISMS, perform information security risk discovery, define scope, create an evidence matrix, conduct a gap analysis, draft a Statement of Applicability, prepare for an internal audit, or create an improvement plan. Use neo-iso-27701…

Benknightdark/neo-skills · 103 tokens

neo-iso-27701

Use this skill when the user needs to establish, review, or improve an ISO/IEC 27701 PIMS, inventory PII processing, analyze controller and processor responsibilities, create a privacy risk or evidence matrix, conduct a gap analysis, prepare for an audit, or create an improvement plan. Use neo-iso-27001 when the main…

Benknightdark/neo-skills · 102 tokens