gdpr-audit-prep
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The Python scripts
scripts/gdpr_readiness_score.pyandscripts/ropa_completeness_checker.pyare well-constructed and only utilize standard library modules. They perform diagnostic analysis on local YAML files without engaging in network activity, subprocess spawning, or dynamic code execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from user-provided YAML files which represents a potential surface for indirect prompt injection, although the risk is mitigated by the script's structured output format.
- Ingestion points:
scripts/gdpr_readiness_score.pyandscripts/ropa_completeness_checker.pyingest configuration and ROPA files provided as command-line arguments. - Boundary markers: None present; the scripts parse the files directly into data structures.
- Capability inventory: The skill is capable of reading local files and printing results to the console; it does not have network access or system-modification privileges.
- Sanitization: The custom YAML parser used in the scripts handles data as literal strings or basic scalars, avoiding unsafe execution of the input content.
Audit Metadata