gdpr-self-assessment
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance and tooling for GDPR compliance reviews. All files are readable and contain no hidden content or malicious instructions.
- [COMMAND_EXECUTION]: The Python script
scripts/process.pyis a utility for data processing. It reads a local JSON file provided via command-line arguments and performs scoring calculations. The script uses standard libraries and does not involve subprocess execution, network operations, or dangerous file writes. - [PROMPT_INJECTION]: A review for indirect prompt injection (Category 8) was conducted on
scripts/process.py. The script ingests untrusted data from a JSON file and mirrors fields (such as 'organisation') into its output. While this represents a data ingestion surface, the risk is mitigated by the structured JSON output and the lack of sensitive capabilities within the script itself. - Ingestion points:
scripts/process.pyloads external JSON data from a user-specified path. - Boundary markers: None; the script trusts the structure of the input JSON.
- Capability inventory: The script is restricted to basic data manipulation and stdout printing.
- Sanitization: No explicit sanitization of strings is performed before inclusion in the output report.
Audit Metadata