cn-pipl-pia
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not contain any executable code, scripts, or system commands. It relies entirely on natural language instructions to guide the agent in drafting a document.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a set of 'Required Inputs' to be provided by the user. While this constitutes a data ingestion surface, the skill does not utilize any high-risk capabilities—such as file writing, network operations, or dynamic code execution—that could be exploited via injected instructions in that data. The agent acts solely as a structured document generator based on user input.
- [DATA_EXPOSURE]: There are no hardcoded credentials, API keys, or attempts to access sensitive local file paths. The skill requests specific data details from the user for the purpose of the assessment but does not exfiltrate this information.
Audit Metadata