south-africa-popia
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides regulatory guidance and a local assessment tool for POPIA compliance. The Python script
scripts/process.pyuses only standard libraries for data management and contains no network, file, or shell execution capabilities. The markdown documentation is purely informative and contains no injection attempts.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential surface for indirect prompt injection as it processes untrusted compliance data. 1. Ingestion points: Data enters via thePOPIAComplianceEngineinscripts/process.py. 2. Boundary markers: No specific delimiters or 'ignore' instructions are present in the processing logic. 3. Capability inventory: The skill has no file-writing, network access, or command execution capabilities across any of its files. 4. Sanitization: No specific input sanitization is implemented. Given the complete lack of dangerous capabilities, the injection surface is not exploitable.
Audit Metadata