security-compliance-payment
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security compliance baseline for payment data handling. It implements robust preventative measures through the sensitive_data_rules configuration, which explicitly forbids reading or writing actual cardholder data (PAN, CVV, track data) and mandates redaction of such patterns in outputs.\n- [SAFE]: Tool access is appropriately restricted for its purpose. The forbidden-tools list (Bash, WebFetch) prevents the agent from executing shell commands or making external network requests, mitigating risks of remote code execution or data exfiltration.\n- [SAFE]: No indicators of prompt injection, obfuscation, or persistence mechanisms were detected. The skill instructions focus on valid compliance workflows and architecture reviews.
Audit Metadata