lgpd-compliance-check
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed entirely of markdown documentation and text templates. No scripts, binaries, or configuration files that execute code are included.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing user-supplied documents such as contracts and privacy policies. This presents a theoretical surface for indirect prompt injection if the ingested documents contain adversarial instructions. This functionality is central to the skill's stated purpose, and the skill lacks instructions for dangerous operations. The ingestion points are located in SKILL.md under the contract review workflows. No specific boundary markers or sanitization procedures are defined, but the skill itself does not possess high-privilege capabilities like network access or system command execution.
Audit Metadata