china-kyc-doc-parse
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill handles sensitive Personally Identifiable Information (PII) as part of its core KYC functionality. It utilizes reputable services (Wind, iFind) and implements standard algorithmic validation for Chinese ID cards (Mod 11 checksum).
- [PROMPT_INJECTION]: The skill processes untrusted document data, creating a surface for indirect prompt injection.
- Ingestion points: Document images and OCR text processed during the intake and extraction steps (SKILL.md).
- Boundary markers: None identified.
- Capability inventory: Utilizes MCP tools like
wind-mcpandAkShare MCPfor data verification and corporate info lookup (SKILL.md). - Sanitization: Implements strict data format and checksum validation but lacks explicit sanitization for embedded natural language instructions.
Audit Metadata