qe-test-data-management

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill promotes secure data handling by providing logic for synthetic data generation and explicit anonymization of PII, following GDPR and CCPA compliance principles.
  • [SAFE]: It utilizes the well-known and widely trusted '@faker-js/faker' library for generating realistic but non-sensitive test data.
  • [PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by processing external data sources such as production snapshots.
  • Ingestion points: production-snapshot data source processed via the Anonymize Production Data task.
  • Boundary markers: No explicit boundary markers or instruction-ignoring delimiters are defined in the provided data processing snippets.
  • Capability inventory: Includes database write operations (db.users.insertMany) and complex agent task coordination (Task, FleetManager).
  • Sanitization: The skill includes specific sanitization routines such as email masking, credit card masking, and field-level anonymization to prevent data leakage.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 06:09 PM