Workflow Privacy Request Auditor

Produce a conservative privacy and external-request inventory before a template is imported or shared.

Input and output

Input is a redacted JSON workflow. Output is PASS or REVIEW, with endpoint inventory, sensitive-field hints, and review reasons.

Execution and boundaries

Run python scripts/audit_privacy_requests.py --input examples/input.json --output examples/output.json. It scans text and keys only; it does not identify people, verify a vendor policy, call an endpoint, or claim legal compliance.

Acceptance

The sample records an external endpoint and a sensitive-field hint. Removing both produces PASS.