gdpr-dsgvo-expert
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of local scripts (
gdpr_compliance_checker.py,dpia_generator.py, anddata_subject_rights_tracker.py) to automate compliance tasks. These scripts are used for scanning code, generating impact assessments, and managing data subject rights. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface as it is designed to ingest and process arbitrary external codebases during compliance scans.
- Ingestion points: Files within user-specified project directories scanned by
gdpr_compliance_checker.py(SKILL.md). - Boundary markers: None mentioned in the skill description or tool usage to prevent instructions in scanned files from influencing the agent.
- Capability inventory: The skill utilizes local script execution for analysis and supports file system output for compliance reports.
- Sanitization: The description does not specify any sanitization or validation of the data processed from external repositories.
Audit Metadata