ra-qm-skills
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted project data through various analysis scripts such as gdpr_compliance_checker.py and hipaa_risk_assessment.py. This is a necessary function for compliance auditing. The scripts perform passive regex-based scanning and do not execute external code or shell commands based on file content.
- [EXTERNAL_DOWNLOADS]: The README and configuration files reference the author's personal website and GitHub repository. These resources are consistent with the identified author and do not constitute a security risk.
- [COMMAND_EXECUTION]: The provided Python scripts are restricted to the standard library and do not invoke subprocesses or perform any arbitrary command execution.
Audit Metadata