gdpr-dpia-en
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or suspicious data exfiltration vectors were detected. The skill is designed for local execution and explicitly limits its scope to drafting assessments and providing screening logic.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local Python script (
scripts/dpia_screening.py) which processes GDPR criteria flags to provide a recommended course of action. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of risk criteria flags passed to the screening script. The implementation is secure as it validates all inputs against a predefined dictionary of valid keys.
- Ingestion points: Arguments passed to
scripts/dpia_screening.pyvia CLI. - Boundary markers: None provided in the prompt structure.
- Capability inventory: Limited to
BashandReadtools for local script execution and documentation access. - Sanitization: The Python script performs explicit membership checks against static dictionaries (
NINEandMANDATORY) before processing any input.
Audit Metadata