gdpr-dsgvo-expert
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implementation is transparent and consistent with its stated purpose. No malicious patterns, obfuscation, or security vulnerabilities were identified in the scripts or documentation.
- [INDIRECT_PROMPT_INJECTION]: The codebase scanner (scripts/gdpr_compliance_checker.py) processes user-provided files which could contain adversarial prompts. 1. Ingestion points: The script reads any file with matching extensions in user-provided directories. 2. Boundary markers: No specific delimiters or warning instructions are used in the generated report. 3. Capability inventory: The skill can write reports to the local file system but lacks network or dynamic code execution capabilities. 4. Sanitization: No sanitization of the extracted content is performed. This represents a low-risk surface inherent to the tool design.
- [DATA_EXPOSURE]: The skill manages personal data (PII) which is stored locally in JSON format (dsr_requests.json) to support the Data Subject Rights Tracker. No network transmission or exfiltration of this data was observed.
Audit Metadata