mena-hr-payroll
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/list-vendors.mjsthat the agent is instructed to use for generating a deterministic list of vendors. The script reads from a local JSON file (data/processed/vendors.json) using standard Node.js file system modules. - [SAFE]: The instructions implement strong security boundaries for high-risk operations. It explicitly forbids the agent from altering payroll or employee records without approval, requires masking of PII in examples, and mandates human-in-the-loop validation for any live actions involving financial or identity data.
Audit Metadata