qe-test-data-management
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill promotes secure data handling by providing logic for synthetic data generation and explicit anonymization of PII, following GDPR and CCPA compliance principles.
- [SAFE]: It utilizes the well-known and widely trusted '@faker-js/faker' library for generating realistic but non-sensitive test data.
- [PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by processing external data sources such as production snapshots.
- Ingestion points:
production-snapshotdata source processed via theAnonymize Production Datatask. - Boundary markers: No explicit boundary markers or instruction-ignoring delimiters are defined in the provided data processing snippets.
- Capability inventory: Includes database write operations (
db.users.insertMany) and complex agent task coordination (Task,FleetManager). - Sanitization: The skill includes specific sanitization routines such as email masking, credit card masking, and field-level anonymization to prevent data leakage.
Audit Metadata