The Agent Skills Directory

[SAFE]: The skill consists of comprehensive documentation, workflow templates, and a Python utility (scripts/process.py) designed for GDPR compliance auditing. All components are aligned with the stated purpose of RoPA maintenance.
[DATA_EXPOSURE]: Analysis of scripts/process.py shows it is a local processing script that reads JSON data via standard input/file paths. It contains no network exfiltration logic, no access to sensitive system directories (like .ssh or .aws), and no credential harvesting patterns.
[COMMAND_EXECUTION]: The skill does not perform any arbitrary command execution, subprocess spawning, or dynamic shell operations. The Python script uses safe, standard libraries for data parsing and date arithmetic.
[OBFUSCATION]: No obfuscation techniques were detected. The skill contains no Base64-encoded commands, zero-width characters, homoglyphs, or hidden URLs.
[REMOTE_CODE_EXECUTION]: The skill does not download external scripts or packages. It relies solely on the standard Python environment for its monitoring functions.
[INDIRECT_PROMPT_INJECTION]: While the script processes external JSON files, it does not interpret the content as instructions or perform actions based on the data that could lead to injection attacks. The risk surface is negligible.

ropa-maintenance-workflow