Skip to content

AIMS ISO 42001 Audit

Pressure-tests an AI management system against ISO/IEC 42001 with six audit questions before certification

Stars
29,149
Licence
MIT
Files
1 file

What it does

This skill makes the agent act as a strict internal auditor for an AI management system based on ISO/IEC 42001, the international standard for managing AI responsibly. When invoked with a scope, the agent works through six demanding questions covering AI system scope, the AI policy, risk registers and controls, re-assessment after model changes, internal audit planning and auditor independence, and integration with existing ISO 27001 or ISO 13485 systems. It then outputs a structured report with a readiness verdict and three prioritised actions. The skill references helper scripts that would produce gap analysis, risk register and audit schedule outputs from JSON files the user supplies.

Great for

  • Compliance or quality staff preparing for an ISO 42001 stage 1 certification audit
  • Teams running an annual internal audit cycle for an AI management system
  • Organisations onboarding a new AI system into an existing AI governance scope

Skip it if

  • People seeking legal advice on EU AI Act obligations, since the skill is an audit checklist and not a legal opinion
  • Anyone expecting a certified outcome, because the verdict is generated by the agent and the referenced scripts are not included in the skill file itself, so results depend on the user's own evidence and expert review

Try asking

  • “Run the AIMS audit for our customer support chatbot scope before our stage 1 certification”
  • “Check whether our AI risk register is current after we fine-tuned the fraud detection model”
  • “Review our AI policy and scope statement against the six ISO 42001 forcing questions”
  • “Assess whether our AI governance can be merged with our existing ISO 27001 controls”
Step-by-step guide: how to use AIMS ISO 42001 AuditInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    aims-audit.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip aims-audit.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip aims-audit.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Prepare your evidence.json, risks.json and audit_scope.json files before running, since the scripts need structured input to produce meaningful gap and risk results
  • Treat the verdict as a preparation aid and validate findings with a qualified ISO 42001 auditor before committing to certification
  • Check the referenced helper scripts and their paths before running, because the skill file alone does not include them and they execute on your machine

What's inside

  • SKILL.md

Redistributed unmodified from alirezarezvani/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.