gdpr-rails
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a JavaScript implementation for conditional loading of the Google Tag Manager library from googletagmanager.com, which is a well-known service used for consent-managed analytics.\n- [INDIRECT_PROMPT_INJECTION]: The skill implements logic to handle and export user-generated content (such as messages and account details), which serves as an ingestion point for potentially untrusted data.\n
- Ingestion points: Subject and body fields of the Message model and attributes of the User model in SKILL.md.\n
- Boundary markers: Not explicitly implemented in the provided template snippets.\n
- Capability inventory: The skill contains patterns for database writes and deletions using update!, update_all, and destroy_all to facilitate the Right to Erasure.\n
- Sanitization: Relies on standard Rails ApplicationRecord protections; no additional sanitization is applied to the exported data bundle.
Audit Metadata