gdpr-ccpa-privacy-auditor
Audits web applications to ensure declared privacy policies match actual technical data collection practices. Use to identify discrepancies in cookie usage, tracking scripts, and user data handling.
How do I install this agent skill?
npx skills add https://github.com/jorgealves/agent_skills --skill gdpr-ccpa-privacy-auditorIs this agent skill safe to install?
- Gen Agent Trust Hubpass
The skill is a privacy auditing tool that scans websites and analyzes policy text for GDPR/CCPA compliance. It is susceptible to indirect prompt injection because it processes untrusted data from external websites and user-provided documents without documented sanitization.
- Socketwarn
1 alert: gptAnomaly
- Snykwarn
Risk: MEDIUM · 1 issue
- Runlayerwarn
2/2 files flagged
- ZeroLeakspass
Score: 93/100 · 2 sections analyzed
What does this agent skill do?
GDPR/CCPA Privacy Auditor
Purpose and Intent
The gdpr-ccpa-privacy-auditor is a transparency tool. It helps companies ensure that their public-facing privacy policies actually match their technical implementations, preventing "Privacy Washing" and reducing the risk of regulatory fines.
When to Use
- Privacy Impact Assessments (PIA): Run as part of a recurring privacy review.
- Marketing Launches: Check new landing pages to ensure new trackers haven't been added without updating the policy.
- Due Diligence: Audit a target company's website during a merger or acquisition.
When NOT to Use
- Internal Only Apps: Not designed for apps behind a firewall or VPN without public endpoints.
- Comprehensive Legal Audit: Only focuses on technical indicators (cookies, scripts, data models); does not audit physical security or organizational policies.
Error Conditions and Edge Cases
- Server-Side Tracking: Trackers that run purely on the server (no client-side script) cannot be detected via URL scanning.
- Dynamic Content: Some trackers may only load for specific regions or after specific user interactions (like clicking a button).
Security and Data-Handling Considerations
- Passive Scanning: When scanning URLs, it acts like a standard browser.
- Source Code Privacy: If providing
source_code_path, ensure the environment is secure and the code is not transmitted externally.
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/jorgealves/agent_skills/gdpr-ccpa-privacy-auditor">View gdpr-ccpa-privacy-auditor on skillZs</a>