The Agent Skills Directory

[SAFE]: The skill operates entirely locally using Python scripts to analyze directories and manage compliance documentation. No network operations (curl, wget, requests) were detected across any of the included scripts.
[REMOTE_CODE_EXECUTION]: No remote code execution patterns were found. The skill relies solely on the Python standard library (argparse, json, re, pathlib, datetime, uuid).
[CREDENTIALS_UNSAFE]: While the gdpr_compliance_checker.py script contains regular expressions for detecting financial data and secrets (e.g., credit card patterns, API keys), these are used for auditing the target codebase and are not hardcoded credentials belonging to the skill itself.
[DATA_EXFILTRATION]: There are no network ingestion or exfiltration points. The tool writes reports to the local filesystem as requested by the user via command-line arguments.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it scans external files and processes JSON templates. However, these are standard static analysis functions and do not present a malicious risk in this context.
Ingestion points: scripts/gdpr_compliance_checker.py (reads local source files), scripts/dpia_generator.py (reads local JSON input).
Boundary markers: Not applicable for these CLI tools.
Capability inventory: File system read and write operations only.
Sanitization: Uses standard library regex and JSON parsing.

gdpr-dsgvo-expert