pii-detect
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data via the "input-text" argument to detect PII. This creates a vulnerability surface for indirect prompt injection, where malicious instructions hidden in the text could attempt to influence the agent's behavior.
- Ingestion points: The "input-text" argument defined in SKILL.md serves as the entry point for external data.
- Boundary markers: The instructions do not specify any delimiters or safety prompts to ensure the agent ignores instructions that might be contained within the processed text.
- Capability inventory: The skill is configured with access to the Bash tool and specialized analysis tools, which could be targeted for abuse via a successful injection.
- Sanitization: No input sanitization or validation logic is defined in the skill body.
Audit Metadata