gdpr-dsar-en
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the skill instructions or associated scripts.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute a local helper script,scripts/gdpr_deadlines.py. This script is a clerical utility for date arithmetic (adding months according to EU Regulation 1182/71). It has no external dependencies, performs no network operations, and does not access sensitive files. - [DATA_EXPOSURE]: The skill is configured with
data-residency: localandpii-egress: none. It is designed to assist with Data Subject Access Requests (DSAR) without transmitting PII or sensitive data to external services. All processing is scoped to the local environment. - [REMOTE_CODE_EXECUTION]: No patterns of remote code execution, external downloads, or unverifiable dependencies were detected. The skill relies exclusively on its provided local files.
- [PROMPT_INJECTION]: The instructions do not contain markers for overriding agent behavior or bypassing safety filters. The skill clearly defines a governance boundary where the AI only drafts responses and calculates metadata, while critical actions (erasure, export, sending) are reserved for human actors.
Audit Metadata