skills/mukul975/anthropic-cybersecurity-skills/conducting-gdpr-compliance-assessment/Gen Agent Trust Hub
conducting-gdpr-compliance-assessment
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The utility
scripts/generate_ropa_report.pyemployssubprocess.runto invoke thepandocsystem command for converting Markdown reports into PDF format. This behavior is confined to specific file conversion tasks using local temporary files. - [INDIRECT_PROMPT_INJECTION]: The
scripts/article30_parser.pyscript is designed to process external text files, such as contracts and privacy policies, to extract compliance data. While this creates a data ingestion surface, the script functions as a deterministic keyword extractor rather than a component that passes raw external input directly into an LLM's control logic. - [CREDENTIALS_UNSAFE]: The document
references/detailed-workflow.mdincludes a Python code example for automated data deletion which contains a hardcoded database password (secret). This is identified as a standard documentation placeholder for local development environments and does not constitute a risk to production systems.
Audit Metadata