gdpr-dsgvo-expert

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines several tools that execute local Python scripts such as gdpr_compliance_checker.py, dpia_generator.py, and data_subject_rights_tracker.py. These scripts are used to automate compliance audits and track data subject requests, which are legitimate operations consistent with the skill's description.
  • [PROMPT_INJECTION]: The skill includes surfaces for potential indirect prompt injection as it ingests untrusted data when scanning external codebases and reading user-provided JSON files. The primary ingestion points are found in the scripts/gdpr_compliance_checker.py and scripts/dpia_generator.py tools. While the capability inventory includes executing local scripts to process this data, the provided documentation does not specify explicit boundary markers or sanitization procedures for the external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 12:07 PM
Security Audit — agent-trust-hub — gdpr-dsgvo-expert