gdpr-compliance-check
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit user-provided information such as application architectures, data flow descriptions, and code snippets, creating a data ingestion surface.
- Ingestion points: The agent receives and processes user-supplied data regarding their web applications and privacy policies as instructed in SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to treat user-provided data as untrusted content.
- Capability inventory: The skill instructions and reference files focus on providing verbal recommendations and audit checks; they do not include or invoke tools for file system modification, network communication, or code execution.
- Sanitization: There are no explicit instructions for the agent to sanitize or validate the external content before processing it.
- [SAFE]: No other security concerns were identified across the analyzed files. The provided code snippets in the reference documentation are for illustrative purposes only and do not contain malicious payloads or executable scripts.
Audit Metadata