pdpa-security-audit
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate security tool designed to audit codebases for compliance and common security flaws. It provides clear instructions for searching for dangerous patterns and mapping them to legal and industry standards.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied source code. This represents a potential attack surface where instructions hidden in the analyzed code could attempt to influence the audit outcome. However, the skill's instructions focus on specific pattern matching and reporting, which naturally mitigates this risk. As the skill's primary purpose is security analysis, this inherent surface is considered acceptable.
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to search for hardcoded secrets in the user's codebase (Finding 4). This is a defensive search practice and not a malicious attempt to collect or exfiltrate credentials for the attacker's benefit.
- [DEPENDENCY_SAFETY]: The skill includes checks for typosquatting and malicious packages (Finding 7) in the analyzed codebase, demonstrating a security-first approach to auditing external dependencies.
Audit Metadata