npx skills add smithery/neversight --skill gdpr-ccpa-privacy-auditor
jorgealves/agent_skills
gdpr-ccpa-privacy-auditor
Audits web applications to ensure declared privacy policies match actual technical data collection practices. Use to identify discrepancies in cookie usage, tracking scripts, and user data handling.
Installation
npx skills add jorgealves/agent_skills --skill gdpr-ccpa-privacy-auditor
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
Helps users discover and install agent skills when they ask questions like "how do I do X", "fi…
3.3M installsBrowser automation CLI for AI agents. Use when the user needs to interact with websites, includ…
810.4K installsReview UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "chec…
617.3K installsBuild, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and …
576.5K installsPrepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Te…
568.3K installsAlso in this package
Other skills from jorgealves/agent_skills · top by installs.
npx skills add jorgealves/agent_skills
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Also listed on
Alternate registries and mirrors of this skill.
Repository health
main
Package contents
Files included with this skill beyond the listing page.
-
skill md
SKILL.md1,694 B -
docs
SUMMARY.md231 B
History
- First seen on skills.sh
- First recorded snapshot · 393 installs
SKILL.md
GDPR/CCPA Privacy Auditor
Purpose and Intent
The gdpr-ccpa-privacy-auditor is a transparency tool. It helps companies ensure that their public-facing privacy policies actually match their technical implementations, preventing "Privacy Washing" and reducing the risk of regulatory fines.
When to Use
- Privacy Impact Assessments (PIA): Run as part of a recurring privacy review.
- Marketing Launches: Check new landing pages to ensure new trackers haven't been added without updating the policy.
- Due Diligence: Audit a target company's website during a merger or acquisition.
When NOT to Use
- Internal Only Apps: Not designed for apps behind a firewall or VPN without public endpoints.
- Comprehensive Legal Audit: Only focuses on technical indicators (cookies, scripts, data models); does not audit physical security or organizational policies.
Error Conditions and Edge Cases
- Server-Side Tracking: Trackers that run purely on the server (no client-side script) cannot be detected via URL scanning.
- Dynamic Content: Some trackers may only load for specific regions or after specific user interactions (like clicking a button).
Security and Data-Handling Considerations
- Passive Scanning: When scanning URLs, it acts like a standard browser.
- Source Code Privacy: If providing
sourcecodepath, ensure the environment is secure and the code is not transmitted externally.