mohitagw15856/privacy-policy-drafter
skills/privacy-policy-drafter/SKILL.md
Draft a clear, plain-language privacy policy tailored to what a product actually collects and does with data. Use when asked to write a privacy policy, draft a data-protection notice, or create a GDPR/CCPA-aware privacy statement. Produces a structured policy covering data collected, purposes, legal bases, sharing, retention, user rights, and contact — written to be readable, not boilerplate. Not legal advice; have counsel review before publishing.
$ install --global
skillsauthnpx skillsauth add mohitagw15856/pm-claude-skills privacy-policy-drafterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 22, 2026, 6:59 AM104.7s1 file scanned
SKILL.md
- name:
- privacy-policy-drafter
- description:
- Draft a clear, plain-language privacy policy tailored to what a product actually collects and does with data. Use when asked to write a privacy policy, draft a data-protection notice, or create a GDPR/CCPA-aware privacy statement. Produces a structured policy covering data collected, purposes, legal bases, sharing, retention, user rights, and contact — written to be readable, not boilerplate. Not legal advice; have counsel review before publishing.
Privacy Policy Drafter Skill
A privacy policy should tell users plainly what you collect, why, and what control they have — not hide it in legalese. This skill drafts a structured, regulation-aware policy from how the product actually handles data. Not legal advice — a qualified lawyer should review before you publish, and obligations vary by jurisdiction.
Working from a brief
Given a product description, draft the full policy anyway, inferring typical data flows and marking each inference (confirm — reflects assumed practice). Never leave "[company name]"-style gaps un-flagged, and never state a practice the founder didn't confirm as fact without labelling it an assumption.
Required Inputs
Ask for (if not already provided):
- Product / company and what it does
- Data collected (account info, usage/analytics, payment, location, cookies, etc.)
- Why it's collected and who it's shared with (processors, analytics, payment, ads)
- Jurisdictions / regulations in scope (GDPR, UK GDPR, CCPA/CPRA, others)
- Contact for privacy requests and whether there's a DPO
Output Format
A ready-to-review policy with these sections:
- Who we are & scope — controller identity, what the policy covers, effective date
- Information we collect — categorised (provided / automatic / from third parties), each with examples
- How and why we use it — purposes, with legal bases where GDPR applies (consent, contract, legitimate interest…)
- Cookies & tracking — types used and how to control them (link to a cookie notice if separate)
- Sharing & disclosure — processors and third parties, why, and cross-border transfer note
- Retention — how long, and the criteria for deciding
- Your rights — access, deletion, correction, portability, objection, opt-out of sale/sharing; how to exercise them
- Security — high-level measures (no false guarantees)
- Children — whether the service targets/permits minors
- Changes & contact — how updates are notified; the privacy contact / DPO
End with: ⚠️ Review checklist — the specific items counsel must confirm (legal bases, retention periods, transfer mechanism, sub-processor list).
Quality Checks
- [ ] Each data category ties to a stated purpose (and legal basis where GDPR applies)
- [ ] User rights and how to exercise them are explicit
- [ ] Retention is addressed, not skipped
- [ ] Plain language — readable by a non-lawyer
- [ ] Assumptions flagged; "not legal advice — counsel must review" retained
Anti-Patterns
- Generic boilerplate that doesn't match what the product does
- Claiming GDPR/CCPA compliance as a fact rather than reflecting practices
- Vague "we may share with third parties" with no categories or purpose
- Overpromising security ("your data is 100% safe")
Related Skills
mohitagw15856/win-loss-analysis
business
VerifiedTrustedCommunity
Analyze why deals are won and lost and turn it into an action plan. Use when asked to run a win/loss analysis, review closed-won and closed-lost deals, understand why the team is losing to a competitor, or summarize sales feedback into patterns. Produces a structured win/loss report with themes, win/loss rates by segment and competitor, representative quotes, and prioritized actions for product, marketing, and sales.
1,117SKILL.mdUpdated Jul 2, 2026
mohitagw15856/which-skill
development
VerifiedTrustedCommunity
Route a fuzzy request to the right skill in this library. Use when the user is unsure which skill fits, asks 'which skill should I use for X', describes a task without naming a skill, or when a request could plausibly match several skills. Produces a best-fit recommendation with the inputs to gather, a runner-up with the tie-breaker, and a workflow recipe when the job spans multiple skills.
1,117SKILL.mdUpdated Jul 2, 2026
mohitagw15856/vuln-triage
testing
VerifiedTrustedCommunity
Triage a vulnerability or scanner finding — assess real severity, exploitability, and how urgently to fix. Use when asked to triage a CVE, prioritize scanner/pentest findings, assess a vuln's risk, or decide what to patch first. Produces a triage verdict: CVSS-informed severity adjusted for your context, exploitability, real risk, a fix/mitigation, and an SLA — so you fix what matters, not just what's red.
1,117SKILL.mdUpdated Jul 2, 2026
mohitagw15856/voice-of-customer-program
development
VerifiedTrustedCommunity
Stand up a Voice of Customer (VoC) program that turns feedback into action. Use when asked to build a VoC program, design a customer feedback loop, consolidate feedback sources, or set up a closed-loop feedback process. Produces a VoC program design — objectives, feedback sources and channels, a taxonomy, collection and analysis cadence, closed-loop routing, ownership, and success metrics.
1,117SKILL.mdUpdated Jul 2, 2026