gdpr-dsgvo-expert
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill defines several tools that execute local Python scripts such as
gdpr_compliance_checker.py,dpia_generator.py, anddata_subject_rights_tracker.py. These scripts are used to automate compliance audits and track data subject requests, which are legitimate operations consistent with the skill's description. - [PROMPT_INJECTION]: The skill includes surfaces for potential indirect prompt injection as it ingests untrusted data when scanning external codebases and reading user-provided JSON files. The primary ingestion points are found in the
scripts/gdpr_compliance_checker.pyandscripts/dpia_generator.pytools. While the capability inventory includes executing local scripts to process this data, the provided documentation does not specify explicit boundary markers or sanitization procedures for the external content.
Audit Metadata