pci-dss-audit
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-provided source code, creating an ingestion surface for potentially untrusted data.
- Ingestion points: Processes files matching payment-related keywords (e.g., 'payment', 'checkout') and SDK imports.
- Boundary markers: Implements a mandatory verification step to confirm PCI-DSS scope before processing content.
- Capability inventory: Limited to static code inspection and reporting; no file-writing or network-access tools are utilized.
- Sanitization: Lacks explicit instructions for escaping or sanitizing code snippets included in generated audit reports.
Audit Metadata