data-breach-blast-radius
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a security auditing tool designed for proactive breach analysis. It follows industry-standard risk methodologies (OWASP, FAIR) to quantify business and regulatory risk.
- [EXTERNAL_DOWNLOADS]: The skill references multiple external URLs for regulatory guidelines and breach cost benchmarks. All referenced domains (e.g., ibm.com, hhs.gov, gdpr-info.eu, gov.br, sso.agc.gov.sg) are official government websites or well-known, trusted industry organizations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests codebase data as its primary input. While this represents a theoretical attack surface, the skill is designed for static analysis and structured report generation. The risk of malicious instructions within the analyzed codebase influencing the agent is mitigated by the skill's specific focus and existing LLM guardrails.
- [DATA_EXPOSURE]: The skill includes extensive regex patterns and field taxonomies for identifying Tier 1 sensitive data such as SSNs, medical records, and credentials. These patterns are used strictly for identifying exposure in the target codebase and do not constitute hardcoded secrets or credentials within the skill itself.
Audit Metadata