backend-data-masking
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate implementation patterns for data masking, encryption (AES-256-GCM), and compliance workflows (GDPR/CCPA).
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were found. The implementation correctly references environment variables (e.g.,
process.env.DATA_KEY) and external vaults for secret management, adhering to secure development standards. - [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code downloads or execution. It provides local utility functions for data processing and sanitization.
- [DATA_EXFILTRATION]: No suspicious network operations or data transmission to untrusted domains were identified. All documented external references (e.g., AWS KMS, HashiCorp Vault) are for standard, secure service integrations.
Audit Metadata