rodo-dpia-pl

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a local Python script (scripts/dpia_screening.py) to perform a deterministic threshold test for GDPR compliance.
  • The script is called via the Bash tool to evaluate criteria against standard regulatory frameworks (Art. 35 RODO and WP248).
  • The script has no external dependencies and processes only the flags provided during the interaction, conforming to the data-residency: local constraint.
  • [SAFE]: The skill implements strong governance boundaries and data privacy protections.
  • Governance: Instructions explicitly state that the AI generates drafts only and that the "controller/DPO" (human) must make final legal calls and submit any applications to the regulator (UODO).
  • Data Handling: The skill includes a pii-egress: none declaration and directs the agent to treat organizational data as confidential, referring users to a transparency document for vendor-specific data handling policies.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 10:25 AM