gdpr-dsgvo-expert
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves auditing and assessing data protection compliance, which necessitates processing external documents such as privacy notices and records of processing activities. This creates a surface where malicious instructions could be embedded in the audited data.
- Ingestion points: Processing user-provided privacy documentation and audit evidence as described in the GDPR Audit Methodology in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions defined to isolate processed data from the agent's core instructions.
- Capability inventory: The skill identifies several scripts for automation, including compliance checking and DPIA workflow automation in SKILL.md.
- Sanitization: The instructions do not specify any validation or sanitization routines for the external data ingested during audits.
Audit Metadata