psd2-sca-compliance
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The file
references/code-review-checklist.mdcontains suggestedrg(ripgrep) commands for the agent to run. These commands are used solely for searching the user's local codebase for payment-related strings (e.g., '3ds', 'otp', 'iban') to build a compliance inventory. This is a standard discovery activity for an auditing skill and does not involve remote execution or shell injection risks. - [SAFE]: The skill implements strict data handling guidelines, explicitly instructing the agent to treat reviewed code and data as evidence only and to describe credentials by type and location rather than extracting raw values. It also includes warnings that the output is not legal advice.
- [SAFE]: The external links provided in
references/psd2-requirements-map.mdpoint to official European Union (EUR-Lex), EBA (European Banking Authority), and EDPB (European Data Protection Board) domains. These are trusted regulatory sources and do not represent a security risk.
Audit Metadata