lgpd-dpa
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data about third-party vendors to generate reports. Ingestion points: Input data derived from vendor audits (SKILL.md). Boundary markers: Not explicitly defined for isolating external data. Capability inventory: Writes documentation files to the local directory .lgpd/vendors/ (SKILL.md). Sanitization: No specific filtering or escaping of input data is mentioned.
- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or remote code execution was found. All operations are local and documentation-focused.
Audit Metadata