Security Report
PRD Generator Flow
Summary
Detected
- Services:
- Permissions:
- Data Handling: pii
Undeclared
All items declared
Warnings
No warnings
Findings (12)
Data Handling
pii declared "user data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "Customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "Customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "Customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "User data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "Demographic"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
Compliance
GDPR undeclared "- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
HIPAA undeclared "- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
SOC-2 undeclared "- Compliance requirements (GDPR, SOC 2, HIPAA — only if applicable)"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
GDPR undeclared "| Compliance | Regulatory and legal | "Data handling complies with GDPR Article 17 (right to erasure"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.