gdpr-compliance-check
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze untrusted external data, including web application architecture descriptions, user flows, and privacy policy texts.
- Ingestion points: Audit instructions in
SKILL.mdand checklists in thereferences/directory require the agent to ingest and process external content provided by the user or retrieved from target websites. - Boundary markers: The instructions lack specific boundary markers or instructions to ignore potential commands embedded within the documents being audited.
- Capability inventory: The skill does not explicitly define or request high-risk capabilities such as file system modifications, network exfiltration, or shell execution in its configuration, which mitigates the impact of successful injection.
- Sanitization: There are no documented sanitization or filtering steps for the untrusted text before it is processed by the agent.
Audit Metadata