pii-detector
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to enhance security by identifying exposed PII and secrets. It uses standard tools like
grepand provides clear, non-obfuscated Python and JavaScript scripts for local execution. - [PROMPT_INJECTION]: The skill is designed to ingest and process external data from files and logs, which presents an attack surface for indirect prompt injection. Ingestion points:
PIIDetector.scan_file(Python) andscanFile(JavaScript) functions; Boundary markers: Absent; Capability inventory:Read,Write, andBashtools; Sanitization: The skill implementsmask_pii/maskPIIfunctions to redact sensitive values in generated reports, mitigating the risk of full data exposure.
Audit Metadata