data-masking
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing untrusted data from logs and databases.
- Ingestion points: Log strings in Express middleware and text blocks in Presidio NLP engine.
- Boundary markers: None explicitly mentioned in code snippets.
- Capability inventory: Shell utilities for database operations and NLP processing.
- Sanitization: The core purpose of the skill is to provide data sanitization and PII masking techniques.
- [COMMAND_EXECUTION]: Includes a bash script for data migration using
pg_dumpandpsql. The commands use placeholder environment variables and represent standard administrative procedures for data masking. - [DATA_EXFILTRATION]: No sensitive file access or unauthorized network operations were detected. Database connection strings used in scripts are generic placeholders for demonstration purposes.
Audit Metadata