compliance-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: A detailed security analysis of the skill's instructions and reference documentation was performed. No malicious patterns were identified.
- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent behavior, bypass safety filters, or extract system prompts.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or unauthorized network operations were found. The skill actively encourages security best practices, such as redacting PII and using restricted-access storage for audit evidence.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving remote script execution, package installation from unknown sources, or dynamic code execution.
- [OBFUSCATION]: No encoded content, zero-width characters, homoglyphs, or other obfuscation techniques were detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes workflows for ingesting data from external sources (e.g., CI/CD pipelines, identity providers, and ticketing systems), this activity is inherent to its primary purpose of compliance auditing and evidence collection. The guidance focuses on technical mapping and process automation rather than providing exploitable code.
Audit Metadata