Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

/cs:aims-audit — AIMS ISO 42001 Forcing Questions · alirezarezvani | DecimalAI

legalby alirezarezvani

/cs:aims-audit — AIMS ISO 42001 Forcing Questions

alirezarezvani/aims-audit

Source alirezarezvani/claude-skills ↗License MIT

/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS.

SkillScore96Maintained

Automatic

Security & AppSec pack

Last verified 8/4/2026

What it changes

Passed 22 of 23 test cases with the skill, and 16 of 23 without it.

Without skill70%

With skill96%

Checks it passed that the model alone missed

Identifies the chief AI officer review command for executive strategic AI decisions.
Identifies model re-tuning as a trigger for re-evaluating AI risks under Clause 6.1.2.
Requires high and critical AI risks to link directly to Annex A risk treatment controls.

and 3 more in the full report

6 fixed16 passed either way1 still failing0 broke

Pass-rate lift: +26 pp
Tokens: +43%
Agent turns: 0%
Response time: -21%

Model gemini-3.6-flashMeasured 8/4/2026v122 of 23 cases passed with skill

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/alirezarezvani-aims-audit/SKILL.md https://app.decimal.ai/s/alirezarezvani-aims-audit/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add alirezarezvani-aims-audit, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/alirezarezvani-aims-audit/ and pins it in .decimal/skills.lock

decimalai skills add alirezarezvani-aims-audit

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/alirezarezvani-aims-audit/SKILL.md https://app.decimal.ai/s/alirezarezvani-aims-audit/SKILL.md

Raw file: /s/alirezarezvani-aims-audit/SKILL.md ↗ · machine-readable summary at /s/alirezarezvani-aims-audit.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 6

Prompt

During our AIMS assessment, the leadership team requested an executive-level strategic review regarding trade-offs between model performance and governance expenditure. Which downstream operational command supports executive AI strategy decisions?

What was checked, without and with the skill
Checked	Without skill	With skill
Identifies the chief AI officer review command for executive strategic AI decisions.	Missed	Passed

case-19 · gemini-3.6-flash · 8/4/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md127 linessingle file

/cs:aims-audit — AIMS ISO 42001 Forcing Questions

Command: /cs:aims-audit <scope>

The ISO 42001 AIMS specialist pressure-tests any AI Management System work. Six questions before any certification commitment, internal audit cycle, or new-system onboarding.

When to Run

Before stage 1 ISO 42001 certification audit
Before annual internal audit cycle (Clause 9.2)
When onboarding a new AI system into existing AIMS scope
When AI risk register hasn't been refreshed in > 6 months
After material model change (re-evaluate risks per Clause 6.1.2)
When audit findings hint at AIMS / ISMS / QMS duplication

The Six AIMS Questions

1. Does the AIMS scope statement name every AI system?

Scope omission = certification finding.

Including: embedded models, third-party AI services, "experimental" production systems
Run aims_gap_analyzer.py to verify Clause 4.3 evidence
"AI features added by SaaS vendors we use" = in scope if they affect the company's services

2. Does the AI policy commit to lawful use AND beneficial purpose AND human oversight AND continual improvement?

Missing any of the four = critical nonconformity at stage 1.

AI policy is NOT info-sec policy — it has separate substantive content
Reference ISO 42001 Annex A.2.2 + Clause 5.2
Marketing-copy "AI ethics" doesn't pass

3. What's the risk register coverage, and which Annex A controls treat each risk?

Risk identification without control mapping = Clause 6.1.3 fails.

Run ai_risk_register_builder.py per ISO 23894 methodology
Every high/critical risk must link to ≥ 1 Annex A control
"Residual verdict: additional_treatment_required" must be closed before stage 1

4. Has the AI risk assessment been re-run since the last material model change?

Concept drift is not a one-time event.

Article 9 EU AI Act + ISO 42001 Clause 6.1.2 both require iterative risk assessment
Material change = retraining on new data, fine-tuning, architecture change, deployment context change
If "we did it 18 months ago and haven't touched it," the AIMS is broken

Track record

Benchmark

22 / 23

test cases passed, vs 16 / 23 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

alirezarezvani / claude-skills

.gemini/skills/aims-audit/SKILL.md

View on GitHub ↗

License MITImported 8/3/2026Version v1

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

alirezarezvani/iso27001-audit-prep/cs:iso27001-audit-prep <scope> — ISO 27001 ISMS audit readiness 6-question forcing interrogation. Use before annual Clause 9.2 internal audit, surveillance audit prep, or stage 1 certification readiness.Close match+23 pp pass-rate lift

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

/cs:aims-audit — AIMS ISO 42001 Forcing Questions

When to Run

The Six AIMS Questions

1. Does the AIMS scope statement name every AI system?

2. Does the AI policy commit to lawful use AND beneficial purpose AND human oversight AND continual improvement?

3. What's the risk register coverage, and which Annex A controls treat each risk?

4. Has the AI risk assessment been re-run since the last material model change?

Track record

Benchmark

Adoption

SkillSafety

Source

Other skills for the same job

Related skills