gdpr-ccpa-compliance
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data practices and documentation related to GDPR and CCPA. While it lacks explicit boundary markers or sanitization for this ingested content, it provides no execution capabilities such as shell access, file-writing, or network operations. This limits the impact of potential indirect injections to analytical bias only.
- [NO_CODE]: The skill consists entirely of natural language instructions and YAML configuration metadata. It does not include any scripts, binaries, or references to external packages, eliminating risks associated with command execution or supply chain attacks.
Audit Metadata