transfer-impact-assessment
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a guide and tool for Transfer Impact Assessments. The instructions and templates strictly follow the EDPB 01/2020 six-step methodology and 02/2020 European Essential Guarantees standards for international data transfers.\n- [SAFE]: The Python scripts (
scripts/process.pyandperforming-transfer-impact-assessment/scripts/process.py) are purely computational. They implement scoring logic based on risk factors and recommended supplementary measures without performing any network requests, file system writes, or executing shell commands. The scripts rely only on standard libraries (json,datetime,typing).\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through the processing of TIA mapping data (e.g., importer/exporter details, data categories). However, a detailed analysis of the capability inventory confirms an absence of dangerous sinks; the skill has no network, file-write, or command execution capabilities. Consequently, malicious input cannot be leveraged to achieve unauthorized actions or data exfiltration.\n- [SAFE]: No evidence of obfuscation, hardcoded credentials, privilege escalation, or persistence mechanisms was found in the provided files. All external references (e.g., EDPB, CJEU case law) are to trusted regulatory and legal sources.
Audit Metadata