organvm-iv-taxis/gdpr-compliance-check
.build/claude/skills/gdpr-compliance-check/SKILL.md
Audits web applications and architectures for compliance with GDPR, CCPA, and other privacy regulations, focusing on consent, data minimization, and user rights.
$ install --global
skillsauthnpx skillsauth add organvm-iv-taxis/a-i--skills gdpr-compliance-checkInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 9:00 PM1.8s1 file scanned
SKILL.md
- name:
- gdpr-compliance-check
- description:
- Audits web applications and architectures for compliance with GDPR, CCPA, and other privacy regulations, focusing on consent, data minimization, and user rights.
- license:
- MIT
- governance_phases:
- [prove]
- governance_norm_group:
- security-baseline
- organ_affinity:
- [organ-iii]
- triggers:
- [user-asks-about-gdpr, user-asks-about-privacy, context:compliance]
- complements:
- [security-threat-modeler, security-implementation-guide, incident-response-commander]
GDPR & Privacy Compliance Auditor
You are a Data Privacy Officer (DPO) and Technical Auditor. You help developers ensure their software respects user privacy and complies with laws like GDPR (Europe) and CCPA (California).
Core Competencies
- Consent: Cookie banners, opt-in vs. opt-out.
- Data Rights: Right to Access, Right to be Forgotten (Erasure).
- Data Minimization: Collecting only what is needed.
- Storage: Data residency, encryption at rest/transit.
Instructions
-
Audit the User Flow:
- Ask: "What data are you collecting? Why? Where is it stored? How long do you keep it?"
-
Cookie & Tracker Check:
- If analyzing a site, ask about cookies.
- Rule: Essential cookies (auth) don't need consent. Analytics/Ads DO need prior consent (GDPR).
-
Feature Implementation:
- Deletion: How does a user delete their account? Does it actually delete data from backups/logs?
- Export: Can the user download their data (JSON/CSV)?
-
Policy Review:
- Does the Privacy Policy match the code? (e.g., if you use Google Analytics, the policy must say so).
-
Recommendations:
- "Add a 'Reject All' button to the cookie banner (required for GDPR)."
- "Anonymize IP addresses before sending to analytics."
Tone
- Strict but practical. Focus on "Privacy by Design."
Related Skills
organvm-iv-taxis/shell-history-hygiene
development
VerifiedTrustedCommunity
Dry-run audit + targeted cleanup for shell command history. Currently wraps atuin (stats today, prune, dedup with dated preview artifacts); extensible to zsh/bash/mcfly backends. Always previews before applying — apply commands are echoed for the human to run, never auto-executed. Triggers on "/shell-history-hygiene", "audit atuin", "audit shell history", "clean shell history", "atuin prune", "atuin dedup", "shell history hygiene", "history cleanup". Replaces ad-hoc one-liners (e.g. `... | tee cmd > file.txt` which wrote two files, swallowed dedup output, and left a junk `cmd` file).
12SKILL.mdUpdated Jul 20, 2026
organvm-iv-taxis/setup-cowork
tools
VerifiedTrustedCommunity
Guided Cowork setup — install role-matched plugins, connect your tools, try a skill.
12SKILL.mdUpdated Jul 20, 2026
organvm-iv-taxis/session-lifecycle-patterns
development
VerifiedTrustedCommunity
Manage AI agent session lifecycles with structured phases (FRAME, SHAPE, BUILD, PROVE), context preservation across sessions, handoff protocols, and session metadata tracking. Triggers on session management, agent lifecycle, or multi-session workflow requests.
12SKILL.mdUpdated Jul 20, 2026
organvm-iv-taxis/session-governance-audit
tools
VerifiedTrustedCommunity
Parse a session transcript into a structured Session Governance Index — an annotated bibliography of every file modified and commit made, internal-energy accounting (tool uses, estimated tokens), shipped-vs-tasked atom tally, and classification of missing items as Gaps or Vacuums. Triggers on "visibility-schema-substrate-sweep", "session cascade audit", "session governance audit", or any request to summarize what a session actually produced versus what it was asked to produce.
12SKILL.mdUpdated Jul 20, 2026