petrogurcak/gdpr
plugins/legal/skills/gdpr/SKILL.md
GDPR and Czech data protection specialist — validates data processing, employee monitoring, consent, and DPIA requirements against GDPR (2016/679) and Czech ZZOÚ (110/2019). Use when asked about personal data processing, employee data, monitoring, cookies, data subject rights, or privacy compliance.
$ install --global
skillsauthnpx skillsauth add petrogurcak/skills gdprInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 4:50 AM5.0s1 file scanned
SKILL.md
- name:
- gdpr
- description:
- GDPR and Czech data protection specialist — validates data processing, employee monitoring, consent, and DPIA requirements against GDPR (2016/679) and Czech ZZOÚ (110/2019). Use when asked about personal data processing, employee data, monitoring, cookies, data subject rights, or privacy compliance.
- context:
- fork
- agent:
- general-purpose
- allowed-tools:
- Grep, Read
GDPR Specialist
Validate data protection questions against GDPR by searching the corpus directly.
Corpus Location
~/Projects/skills/legal/legal-mcp/corpus/gdpr/
Files: chapter-01.md through chapter-11.md — each chapter of GDPR (2016/679).
Process
- Understand the question — what data processing activity needs validation?
- Search corpus — use Grep on the corpus directory to find relevant articles
- Analyze — identify legal basis, assess risks, check DPIA requirements
- Respond in the format below
How to Search
Use Grep with Czech keywords (diacritics-insensitive) on the corpus:
Grep({ pattern: "právní základ zpracování", path: "~/Projects/skills/legal/legal-mcp/corpus/gdpr", "-i": true, output_mode: "content", "-C": 5 })
Run multiple searches — GDPR questions often span multiple articles. Use Čl. or Článek to find specific articles.
Key HR/Employment Context
When evaluating employee data processing:
- Consent is generally NOT valid for employment data (power imbalance — čl. 7, recital 43)
- Preferred legal bases for HR: legitimate interest (čl. 6(1)(f)) or legal obligation (čl. 6(1)(c))
- Employee monitoring requires DPIA (čl. 35) and proportionality assessment
- EU AI Act (srpen 2026): HR use of AI = high-risk category, additional requirements
Response Format
## Posouzení ochrany údajů: [téma]
**Verdikt:** KOMPATIBILNÍ / RIZIKO / NEKOMPATIBILNÍ
### Relevantní ustanovení
- Čl. XX odst. Y GDPR: "[přesná citace z korpusu]"
- Čl. XX odst. Y GDPR: "[přesná citace z korpusu]"
### Analýza
**Právní základ zpracování:** [který z čl. 6(1) se uplatní a proč]
**DPIA požadováno:** [ano/ne — s odůvodněním]
**Práva subjektů:** [která práva jsou dotčena]
### Doporučení
1. [Konkrétní akce]
2. [Konkrétní akce]
### Upozornění
Toto není právní porada. Ověřte s právníkem.
Rules
- ONLY cite text found in the corpus files — never fabricate citations
- If corpus doesn't contain relevant article, say so explicitly
- Always identify the legal basis for processing (čl. 6(1))
- Always assess whether DPIA is needed (čl. 35)
- When annotation exists (marked POZOR), mention it prominently
- If question is outside GDPR scope, say so and suggest correct specialist
Related Skills
petrogurcak/testimonial-harvesting
development
VerifiedTrustedCommunity
Builds a pre-launch social proof strategy through structured beta programs using D'Souza Brain Audit interviews. Use when launching new products/services and need compelling testimonials, planning a beta cohort, designing interview questions to harvest objection-busting social proof, improving video testimonials for landing pages, or designing case studies with metrics. Trigger phrases include "beta tester program for testimonials", "pre-launch social proof", "Brain Audit testimonial framework", "case study harvest", "reverse testimonial", "video testimonial mechanics", "social proof landing page", "sběr referencí", "beta tester program", "testimonial pro landing page", "social proof před launchem", "rozhovor s klientem", "case study sběr", "reference před spuštěním". NOT for ongoing case study production (use growth-hacking case-study approach), offer design (use offer-creation), or conversion optimization (use ux-optimization).
2SKILL.mdUpdated May 14, 2026
petrogurcak/launch-orchestrator
development
VerifiedTrustedCommunity
Use when planning a product launch and the product type is unclear or could be either generic (SaaS/app/physical) or info-product. Routes between marketing:launch-strategy (generic launches) and marketing:info-product-launch (courses, memberships, ebooks, cohorts, communities). Trigger phrases - "launch", "spuštění", "go-to-market", "product launch", "release strategy", "uvedení na trh", "launch plan", "spuštění produktu", "launch sequence", "launch strategy". Do NOT trigger when product type is already clear (use specific skill directly).
2SKILL.mdUpdated May 14, 2026
petrogurcak/info-product-launch
testing
VerifiedTrustedCommunity
Specialized 8-week launch cadence for info-products — online courses, cohort programs, memberships, communities, ebooks, masterminds. Combines Jeff Walker's Product Launch Formula (Seed/Internal/JV variants, PLC sequence, open-cart day-by-day) with Stu McLaren's membership mechanics (closed cart, Success Path) and Hormozi Grand Slam Offer stacking. Use when planning "launch online kurzu", "info-product launch", "PLF launch", "course launch", "membership launch", "cohort launch", "ebook launch", "open cart close cart", "8-week launch of online course", "beta cohort to launch sequence", "spuštění kurzu", "launch členské sekce", "open cart strategie". Differentiates from marketing:launch-strategy (generic SaaS/app launches) — info-product-specific. NOT for SaaS launches, physical products, or services.
2SKILL.mdUpdated May 14, 2026
petrogurcak/mobile-store-release
development
VerifiedTrustedCommunity
Use when releasing an Expo/React Native mobile app to App Store and Google Play - covers eas submit, ASC "Submit for Review", Play promote Internal→Production, OTA update, and decoding common silent failures (Apple agreement expiry, missing English locale, Background Location declaration, web bundle failure on react-native-maps).
2SKILL.mdUpdated May 14, 2026