gdpr-compliance-scanner
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as an automated assistant for GDPR scanning tasks, which involves processing user-provided compliance requirements to generate and validate code, creating a surface for potential injection.
- Ingestion points: Ingests user input triggered by phrases like "gdpr compliance scanner", "gdpr scanner", and "gdpr" (found in SKILL.md).
- Boundary markers: The instructions do not define clear delimiters or "ignore instructions" warnings for the data being scanned.
- Capability inventory: The skill has access to powerful tools including
Bash(cmd:*),Write, andEdit(found in SKILL.md frontmatter). - Sanitization: There are no explicit instructions for the agent to sanitize or escape user-provided content before using it in bash commands or code generation.
Audit Metadata