dpia-assessment
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a utility for legal compliance assessments. It uses local Python scripts to process information provided by the user. Detailed code analysis confirms the scripts do not perform network operations, access sensitive files, or use obfuscated logic.
- [COMMAND_EXECUTION]: The skill executes local Python scripts to perform its analysis. These scripts (
scripts/dpia_threshold_checker.pyandscripts/dpia_risk_register.py) utilize standard Python libraries for file I/O and text processing. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied activity descriptions to check for GDPR triggers. This creates an attack surface for indirect prompt injection; however, the risk is mitigated because the scripts perform simple keyword matching and do not execute the content of the input. Ingestion points:
--activityand--inputparameters in threshold checker script. Boundary markers: Absent. Capability inventory: Local JSON file read/write. Sanitization: Absent.
Audit Metadata