forensic-data-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains architectural patterns and code samples for implementing data integrity and security features. The provided examples follow secure coding practices, such as using tagged template literals for database queries to prevent SQL injection.
- [DYNAMIC_EXECUTION]: Patterns for forensic recovery and data lineage utilize dynamic property access (e.g.,
db[tableName]) to handle generic database operations. This is a standard functional approach for building developer-centric recovery tools and is used appropriately within the provided templates. - [DATA_EXFILTRATION]: The threat detection logic includes implementation stubs for alerting external security teams via standard channels like Slack and PagerDuty. These are legitimate integrations for security monitoring systems and do not involve unauthorized transmission of sensitive data.
- [INDIRECT_PROMPT_INJECTION]: The breach investigation and fraud detection logic process external logs and transaction data. The provided templates use programmatic analysis, such as statistical z-scores and regex pattern matching, rather than direct LLM parsing of untrusted data, effectively mitigating risks associated with data-driven prompt injection.
Audit Metadata