gdpr-test-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-quality educational and evaluation resource for privacy compliance. The provided test patterns (Python snippets) and documentation (GDPR Art. 7, 15, 17, etc.) represent standard industry practices for data protection testing.
- [PROMPT_INJECTION]: Evaluation tasks contained in the
evals/directory provide specific instructions for coding scenarios. These are correctly scoped to the development tasks and do not attempt to override the AI agent's safety protocols or extract system prompts. - [DATA_EXPOSURE]: The skill explicitly mandates the use of synthetic data and provides assertions to prevent the accidental inclusion of sensitive PII (like SSNs or passport numbers) in test fixtures. No hardcoded secrets or credentials were found.
- [REMOTE_CODE_EXECUTION]: The skill does not contain any remote code execution patterns or unsafe script downloads. Dependencies mentioned in evaluation
package.jsonfiles are limited to standard Node.js test runners. - [OBFUSCATION]: All URLs and code snippets are provided in plain text. A review of the referenced domains (e.g., gdpr.eu, oag.ca.gov, globalprivacycontrol.org) confirms they are legitimate regulatory and community resources.
Audit Metadata