The Agent Skills Directory

[SAFE]: The skill's instructions and scripts do not contain any malicious patterns, obfuscation, or instructions to perform dangerous activities. The Python script uses only standard libraries and lacks capabilities for file system access, network communication, or shell command execution.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data in its compliance assessment logic, which represents a theoretical surface for indirect prompt injection, though no exploitable capabilities exist.
Ingestion points: Function arguments in scripts/process.py such as processing_activity and data_subject_name are derived from user-controlled context.
Boundary markers: None present.
Capability inventory: None. The skill does not have access to tools for writing files, making network requests, or executing system commands.
Sanitization: Input data is used solely for dictionary lookups and constructing information records, with no downstream execution or interpolation into sensitive contexts.

thailand-pdpa