ai-dpia

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No prompt injection patterns or attempts to override AI safety guidelines were detected in the instructions or metadata.
  • [DATA_EXFILTRATION]: No sensitive file access or network communication patterns (like curl, wget, or requests) were found in the provided scripts. The data processed is limited to the defined assessment structures and is printed only to the console.
  • [REMOTE_CODE_EXECUTION]: The script scripts/process.py uses only standard Python libraries (json, datetime, dataclasses, enum, typing) and does not download or execute external code.
  • [OBFUSCATION]: No obfuscated strings, hidden Unicode characters, or homoglyph attacks were identified in the codebase or documentation.
  • [DYNAMIC_EXECUTION]: The script follows a static logic flow for risk assessment and does not use dangerous functions like eval(), exec(), or dynamic library loading.
  • [PRIVILEGE_ESCALATION]: No commands related to privilege escalation (such as sudo or chmod) are present in the skill.
  • [INDIRECT_PROMPT_INJECTION]: Although the skill processes data profiles, it has a safe capability tier (no file writing, network access, or command execution), making the surface for indirect injection attacks negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 05:07 AM