lab-column-mapper
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [Data Handling and Privacy]: The skill is designed to handle metadata rather than raw Patient Health Information (PHI). It explicitly instructs the caller to hash or redact patient identifiers before invocation and mandates that the agent only describes the 'shape' of data rather than quoting sample values, which aligns with HIPAA-compliant design patterns.
- [Human-in-the-Loop Validation]: A core security feature is the requirement for a clinical informatics steward to approve suggestions before they are applied to the production SQL environment. This prevents automated errors or malicious schema drift from affecting critical data pipelines.
- [Service Integration]: The skill utilizes well-known enterprise services including Azure AI Search, Dataverse, and Power Automate. These integrations trace back to the vendor's own infrastructure and are standard for enterprise automation tasks.
- [Offline Tooling]: The included Python script (
scripts/rank_column_matches.py) facilitates testing of the ranking logic. It relies exclusively on the Python standard library (such asdifflib,re, andargparse), avoiding external dependencies and remote code execution risks.
Audit Metadata