Security Report
Roadmap Generation Flow
Summary
Detected
- Services: llm-service
- Permissions:
- Data Handling: pii
Undeclared
All items declared
Warnings
No warnings
Findings (11)
Services
llm-service declared "connection: llm-service (runs_on)"
This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.
llm-service declared "connection: llm-service (runs_on)"
This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.
llm-service declared "connection: llm-service (runs_on)"
This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.
llm-service declared "connection: llm-service (runs_on)"
This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.
llm-service declared "connection: llm-service (runs_on)"
This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.
Data Handling
pii declared "user profiles"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "customer data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
Compliance
SOC-2 undeclared "| `{{input.existing_commitments}}` | No | Existing commitments — contractual obligations, regulatory"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.