gdpr-dsar-en
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for local execution as indicated by the
data-residency: localflag and the internal logic, which processes sensitive data without network egress. - [COMMAND_EXECUTION]: The skill uses a provided Python script (
scripts/gdpr_deadlines.py) to perform date calculations. This script is self-contained, uses only Python standard libraries (argparse,calendar,json,datetime), and contains no dangerous operations or dynamic code execution. - [EXTERNAL_DOWNLOADS]: No external dependencies, package managers, or remote scripts are used. All required logic is provided within the skill's own file structure.
- [PROMPT_INJECTION]: The instructions are clear, professional, and focus on regulatory compliance. There are no attempts to bypass safety filters or override agent behavior.
- [DATA_EXFILTRATION]: No network operations (
curl,wget, etc.) are present in either the instructions or the script. Thepii-egress: nonemetadata field is consistent with the code's behavior. - [SAFE]: The skill explicitly defines a 'Governance boundary', ensuring that irreversible or outward-facing actions (like sending emails or deleting data) require human approval and manual execution.
Audit Metadata