Analyze iso27001 gap analyzer operations. Auto-activating skill for Security Advanced.
SkillScore92Maintained
Automatic
◆Security & AppSec pack
Last verified 8/30/2026
What it changes
Passed 22 of 24 test cases with the skill, and 19 of 24 without it.
Without skill79%
With skill92%
Checks it passed that the model alone missed
Specifies requiring formal document approval prior to issue.
Recommends testing recovery time objectives for core services.
States that Clause 6.1.2 governs information security risk assessment.
and 1 more in the full report
4 fixed18 passed either way1 still failing1 broke
Pass-rate lift
+13 pp
Tokens
+55%
Agent turns
0%
Response time
+32%
Model gemini-3.6-flashMeasured 8/30/2026v122 of 24 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 4
Prompt
An ISMS gap review identifies that outbound web traffic is unfiltered on corporate endpoints, leaving employees exposed to malicious domains. Which ISO 27001:2022 Annex A control requires Web Filtering?
What was checked, without and with the skill
Checked
Without skill
With skill
Identifies Control A.8.23 as Web Filtering.
Passed
Passed
Recommends implementing domain filtering mechanisms to remediate the gap.
Missed
Passed
case-09 · gemini-3.6-flash · 8/30/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md60 linessingle file
Iso27001 Gap Analyzer
Overview
This skill provides automated assistance for iso27001 gap analyzer tasks within the Security Advanced domain.
When to Use
This skill activates automatically when you:
Mention "iso27001 gap analyzer" in your request
Ask about iso27001 gap analyzer patterns or best practices
Need help with advanced security skills covering penetration testing, compliance frameworks, threat modeling, and enterprise security.
Instructions
Provides step-by-step guidance for iso27001 gap analyzer
Follows industry best practices and patterns
Generates production-ready code and configurations
Validates outputs against common standards
Examples
Example: Basic Usage
Request: "Help me with iso27001 gap analyzer"
Result: Provides step-by-step guidance and generates appropriate configurations