803-regulations-gdpr
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill acts as a documentation and review framework with explicit constraints designed to protect sensitive information. It includes instructions to replace secrets with redacted placeholders and limits its own scope to technical artifacts rather than untrusted human-authored text.
- [EXTERNAL_DOWNLOADS]: The skill provides links to official GDPR regulatory text on eur-lex.europa.eu. This is a trusted and well-known service for European Union legal information.
- [INDIRECT_PROMPT_INJECTION]: The skill manages the risk of indirect prompt injection when reviewing technical artifacts by implementing strict ingestion rules. Evidence Chain: (1) Ingestion points: Java source code, schemas, and architecture records described in SKILL.md. (2) Boundary markers: Explicit instructions to ignore raw free text and use only sanitized fact records. (3) Capability inventory: Review and report generation with no shell, network, or file-write capabilities. (4) Sanitization: Mandatory redaction of secrets using defined placeholders.
Audit Metadata