[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AF1CHETASW6VAXAG0CB85H":3,"skill-same:01M6AF1CHETASW6VAXAG0CB85H":107},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":31,"publishedAt":54,"linkOnly":55,"markdownContent":56,"markdownBody":57,"frontMatter":58,"refName":59,"commitSha":60,"skillDirectory":61,"forksCount":62,"repositoryHtmlUrl":63,"repositoryHomepageUrl":64,"ownerHtmlUrl":65,"ownerBlogUrl":66,"ownerDescription":67,"updatedAt":68,"install":69,"resources":82},"01M6AF1CHETASW6VAXAG0CB85H","data-privacy-compliance",null,"Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA, and international data protection laws. Use when implementing privacy controls, conducting data protection impact assessments, ensuring regulatory compliance, or managing data subject rights. Expert in consent management, data minimization, and privacy-by-design principles.","davila7\u002Fclaude-code-templates","davila7","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6216945?v=4","01M6ADEWWFPS191NFM0Y1EX1JH","Daniel Avila","01M6ADJHGM78PHQRD3XZTFDVKK",33481,"MIT","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fdata-privacy-compliance\u002FSKILL.md",[18,23,28],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",{"categoryNo":29,"categoryName":30,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000037","律师与法务",[32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53],"compliance","data privacy","privacy compliance","privacy","data","data privacy compliance","when","design","for","implementing","controls","impact","consent management","international","expert","design principles","use","regulatory compliance","hipaa","gdpr","data protection","ccpa","2026-11-10 10:12:30",false,"---\nname: data-privacy-compliance\ndescription: Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA, and international data protection laws. Use when implementing privacy controls, conducting data protection impact assessments, ensuring regulatory compliance, or managing data subject rights. Expert in consent management, data minimization, and privacy-by-design principles.\n---\n\n# Data Privacy Compliance\n\nComprehensive guidance for implementing data privacy compliance across GDPR, CCPA, HIPAA, and other global data protection regulations.\n\n## When to Use This Skill\n\nUse this skill when:\n- Implementing GDPR, CCPA, or HIPAA compliance\n- Conducting Data Protection Impact Assessments (DPIA)\n- Managing data subject rights (access, deletion, portability)\n- Implementing consent management systems\n- Drafting privacy policies and notices\n- Handling data breaches and incident response\n- Designing privacy-by-design systems\n- Conducting privacy audits and assessments\n\n## Key Regulations Overview\n\n### GDPR (General Data Protection Regulation)\n**Scope:** EU residents' data, regardless of where company is located\n**Key Requirements:**\n- Lawful basis for processing (consent, contract, legitimate interest, etc.)\n- Data subject rights (access, deletion, portability, objection)\n- Data Protection Impact Assessments for high-risk processing\n- 72-hour breach notification requirement\n- Records of processing activities\n- Privacy by design and by default\n\n**Penalties:** Up to €20M or 4% of global annual revenue\n\n### CCPA\u002FCPRA (California Consumer Privacy Act)\n**Scope:** California residents' data\n**Key Requirements:**\n- Right to know what data is collected\n- Right to delete personal information\n- Right to opt-out of sale\u002Fsharing\n- Right to correct inaccurate information\n- Right to limit use of sensitive personal information\n\n**Penalties:** Up to $7,500 per intentional violation\n\n### HIPAA (Health Insurance Portability and Accountability Act)\n**Scope:** Protected Health Information (PHI) in the US\n**Key Requirements:**\n- Privacy Rule (patient rights and information uses)\n- Security Rule (safeguards for ePHI)\n- Breach Notification Rule (60-day notification)\n- Business Associate Agreements (BAAs)\n\n**Penalties:** Up to $1.5M per violation category per year\n\n## Data Subject Rights Implementation\n\n### 1. Right to Access (GDPR Art. 15 \u002F CCPA § 1798.100)\n\n**Request Handler:**\n```javascript\nasync function handleAccessRequest(userId, email) {\n  \u002F\u002F Verify identity\n  const verified = await verifyIdentity(email);\n  if (!verified) throw new Error('Identity verification failed');\n\n  \u002F\u002F Collect all personal data\n  const userData = await collectUserData(userId);\n\n  \u002F\u002F Format for readability\n  const report = {\n    personalInfo: userData.profile,\n    activityLogs: userData.activities,\n    preferences: userData.settings,\n    thirdPartySharing: userData.dataSharing,\n    retentionPeriod: '2 years from last activity',\n    dataProtectionOfficer: 'dpo@company.com'\n  };\n\n  \u002F\u002F Generate downloadable report\n  const pdf = await generatePDFReport(report);\n\n  \u002F\u002F Log request for compliance\n  await logAccessRequest(userId, 'completed');\n\n  return pdf;\n}\n```\n\n**Response Timeline:**\n- GDPR: 1 month (extendable to 3 months)\n- CCPA: 45 days (extendable to 90 days)\n\n### 2. Right to Deletion (GDPR Art. 17 \u002F CCPA § 1798.105)\n\n**Deletion Handler:**\n```javascript\nasync function handleDeletionRequest(userId, email) {\n  \u002F\u002F Verify identity\n  const verified = await verifyIdentity(email);\n  if (!verified) throw new Error('Identity verification failed');\n\n  \u002F\u002F Check for legal obligations to retain\n  const mustRetain = await checkRetentionRequirements(userId);\n  if (mustRetain.required) {\n    return {\n      status: 'partial_deletion',\n      retained: mustRetain.data,\n      reason: mustRetain.legalBasis,\n      retentionPeriod: mustRetain.period\n    };\n  }\n\n  \u002F\u002F Delete from all systems\n  await Promise.all([\n    deleteFromDatabase(userId),\n    deleteFromBackups(userId), \u002F\u002F Mark for deletion in next backup cycle\n    deleteFromAnalytics(userId),\n    deleteFromThirdPartyServices(userId),\n    revokeAPIKeys(userId),\n    anonymizeHistoricalRecords(userId)\n  ]);\n\n  \u002F\u002F Confirm deletion\n  await sendDeletionConfirmation(email);\n  await logDeletionRequest(userId, 'completed');\n\n  return { status: 'deleted', timestamp: new Date() };\n}\n```\n\n**Exceptions (when deletion can be refused):**\n- Legal obligations (tax records, contracts)\n- Public interest\u002Fscientific research\n- Defense of legal claims\n- Exercise of freedom of expression\n\n### 3. Right to Data Portability (GDPR Art. 20)\n\n**Export Handler:**\n```javascript\nasync function handlePortabilityRequest(userId, format = 'json') {\n  const userData = await collectUserData(userId);\n\n  \u002F\u002F Structure in machine-readable format\n  const portableData = {\n    exportDate: new Date().toISOString(),\n    userId: userId,\n    data: {\n      profile: userData.profile,\n      content: userData.userGeneratedContent,\n      settings: userData.preferences,\n      history: userData.activityHistory\n    }\n  };\n\n  \u002F\u002F Support multiple formats\n  if (format === 'csv') {\n    return convertToCSV(portableData);\n  } else if (format === 'xml') {\n    return convertToXML(portableData);\n  }\n\n  return portableData; \u002F\u002F JSON by default\n}\n```\n\n**Requirements:**\n- Structured, commonly used, machine-readable format\n- Ability to transmit directly to another controller\n- Only applies to data provided by data subject\n- Only for automated processing based on consent or contract\n\n### 4. Right to Object (GDPR Art. 21)\n\n**Objection Handler:**\n```javascript\nasync function handleObjectionRequest(userId, processingType) {\n  switch (processingType) {\n    case 'direct_marketing':\n      \u002F\u002F Must stop immediately\n      await disableMarketing(userId);\n      await updateConsent(userId, 'marketing', false);\n      break;\n\n    case 'legitimate_interest':\n      \u002F\u002F Assess if we have compelling grounds\n      const assessment = await assessLegitimateInterest(userId);\n      if (!assessment.compelling) {\n        await stopProcessing(userId, processingType);\n      }\n      return assessment;\n\n    case 'profiling':\n      await disableProfiling(userId);\n      await updateConsent(userId, 'profiling', false);\n      break;\n\n    default:\n      throw new Error('Invalid processing type');\n  }\n\n  await logObjectionRequest(userId, processingType, 'granted');\n}\n```\n\n## Consent Management\n\n### Consent Requirements (GDPR)\n\n**Valid Consent Must Be:**\n1. Freely given (no coercion)\n2. Specific (for each purpose)\n3. Informed (clear language)\n4. Unambiguous (clear affirmative action)\n5. Withdrawable (as easy to withdraw as to give)\n\n**Consent Implementation:**\n```html\n\u003C!-- Good: Granular consent -->\n\u003Cform>\n  \u003Ch3>Privacy Preferences\u003C\u002Fh3>\n\n  \u003Clabel>\n    \u003Cinput type=\"checkbox\" name=\"essential\" checked disabled>\n    \u003Cstrong>Essential cookies (Required)\u003C\u002Fstrong>\n    \u003Cp>Necessary for website functionality\u003C\u002Fp>\n  \u003C\u002Flabel>\n\n  \u003Clabel>\n    \u003Cinput type=\"checkbox\" name=\"analytics\" value=\"analytics\">\n    \u003Cstrong>Analytics cookies\u003C\u002Fstrong>\n    \u003Cp>Help us improve our website by collecting usage data\u003C\u002Fp>\n  \u003C\u002Flabel>\n\n  \u003Clabel>\n    \u003Cinput type=\"checkbox\" name=\"marketing\" value=\"marketing\">\n    \u003Cstrong>Marketing cookies\u003C\u002Fstrong>\n    \u003Cp>Show you personalized ads based on your interests\u003C\u002Fp>\n  \u003C\u002Flabel>\n\n  \u003Cbutton type=\"submit\">Save Preferences\u003C\u002Fbutton>\n  \u003Ca href=\"\u002Fprivacy-policy\">Learn More\u003C\u002Fa>\n\u003C\u002Fform>\n```\n\n**Consent Record Storage:**\n```javascript\nconst consentRecord = {\n  userId: 'user123',\n  timestamp: new Date().toISOString(),\n  consentVersion: '2.0',\n  purposes: {\n    essential: { granted: true, required: true },\n    analytics: { granted: true, purpose: 'Website improvement' },\n    marketing: { granted: false, purpose: 'Personalized advertising' }\n  },\n  ipAddress: '192.168.1.1', \u002F\u002F For proof\n  userAgent: 'Mozilla\u002F5.0...', \u002F\u002F For context\n  method: 'explicit_opt_in' \u002F\u002F or 'implicit', 'presumed'\n};\n\nawait saveConsentRecord(consentRecord);\n```\n\n### Cookie Banner (GDPR Compliant)\n\n```html\n\u003Cdiv id=\"cookie-banner\" role=\"dialog\" aria-labelledby=\"cookie-title\">\n  \u003Ch2 id=\"cookie-title\">Cookie Preferences\u003C\u002Fh2>\n  \u003Cp>\n    We use cookies to enhance your experience. Choose which cookies you\n    allow us to use. You can change your preferences at any time.\n  \u003C\u002Fp>\n\n  \u003Cbutton onclick=\"acceptAll()\">Accept All\u003C\u002Fbutton>\n  \u003Cbutton onclick=\"rejectNonEssential()\">Reject Non-Essential\u003C\u002Fbutton>\n  \u003Cbutton onclick=\"showPreferences()\">Manage Preferences\u003C\u002Fbutton>\n\u003C\u002Fdiv>\n\n\u003Cscript>\n\u002F\u002F Must not load non-essential cookies until consent given\nfunction acceptAll() {\n  setConsent({ analytics: true, marketing: true });\n  loadAnalyticsCookies();\n  loadMarketingCookies();\n  hideBanner();\n}\n\nfunction rejectNonEssential() {\n  setConsent({ analytics: false, marketing: false });\n  hideBanner();\n}\n\u003C\u002Fscript>\n```\n\n## Privacy by Design Principles\n\n### 1. Data Minimization\n\n**Principle:** Collect only data necessary for specified purpose\n\n**Implementation:**\n```javascript\n\u002F\u002F ❌ Bad: Collecting unnecessary data\nconst userRegistration = {\n  email: req.body.email,\n  password: req.body.password,\n  fullName: req.body.fullName,\n  phoneNumber: req.body.phoneNumber, \u002F\u002F Not needed\n  dateOfBirth: req.body.dateOfBirth, \u002F\u002F Not needed\n  address: req.body.address, \u002F\u002F Not needed\n  socialSecurityNumber: req.body.ssn \u002F\u002F Definitely not needed!\n};\n\n\u002F\u002F ✅ Good: Only essential data\nconst userRegistration = {\n  email: req.body.email,\n  password: hashPassword(req.body.password),\n  displayName: req.body.displayName \u002F\u002F Optional\n};\n```\n\n### 2. Purpose Limitation\n\n**Principle:** Use data only for specified, explicit purposes\n\n**Implementation:**\n```javascript\n\u002F\u002F Document and enforce purpose\nconst dataProcessingPurpose = {\n  email: [\n    'account_authentication',\n    'order_confirmations',\n    'password_reset'\n  ],\n  phoneNumber: [\n    'order_delivery_notifications'\n    \u002F\u002F NOT: 'marketing_calls' (requires separate consent)\n  ],\n  purchaseHistory: [\n    'order_fulfillment',\n    'customer_support'\n    \u002F\u002F NOT: 'targeted_advertising' (requires separate consent)\n  ]\n};\n\nasync function processData(data, purpose) {\n  if (!isAllowedPurpose(data.type, purpose)) {\n    throw new Error('Purpose not authorized for this data');\n  }\n  \u002F\u002F Proceed with processing\n}\n```\n\n### 3. Storage Limitation\n\n**Principle:** Retain data only as long as necessary\n\n**Implementation:**\n```javascript\nconst retentionPolicy = {\n  userAccounts: {\n    active: 'indefinite',\n    inactive: '2 years',\n    deleted: '30 days grace period'\n  },\n  orderRecords: '7 years', \u002F\u002F Legal requirement\n  supportTickets: '3 years',\n  analytics: '26 months',\n  marketingData: '1 year or until consent withdrawn'\n};\n\n\u002F\u002F Automated data deletion\nasync function enforceRetentionPolicy() {\n  const now = new Date();\n\n  \u002F\u002F Delete inactive accounts\n  await User.deleteMany({\n    lastActive: { $lt: subYears(now, 2) },\n    status: 'inactive'\n  });\n\n  \u002F\u002F Anonymize old analytics\n  await Analytics.updateMany(\n    { createdAt: { $lt: subMonths(now, 26) } },\n    { $unset: { userId: 1, ipAddress: 1 } }\n  );\n\n  \u002F\u002F Delete expired marketing consent\n  await MarketingConsent.deleteMany({\n    $or: [\n      { expiresAt: { $lt: now } },\n      { withdrawnAt: { $lt: subDays(now, 30) } }\n    ]\n  });\n}\n\n\u002F\u002F Schedule daily\ncron.schedule('0 2 * * *', enforceRetentionPolicy);\n```\n\n## Data Protection Impact Assessment (DPIA)\n\n**When Required (GDPR Art. 35):**\n- Systematic and extensive profiling\n- Large-scale processing of sensitive data\n- Systematic monitoring of publicly accessible areas\n- New technologies with high privacy risks\n\n**DPIA Template:**\n```markdown\n# Data Protection Impact Assessment\n\n## Processing Overview\n- **Purpose**: [Describe the processing activity]\n- **Data Types**: [Personal data categories]\n- **Data Subjects**: [Who is affected]\n- **Recipients**: [Who receives the data]\n\n## Necessity Assessment\n- [ ] Is processing necessary for the stated purpose?\n- [ ] Could the purpose be achieved with less data?\n- [ ] Is the retention period justified?\n\n## Risk Assessment\n| Risk | Likelihood | Severity | Mitigation |\n|------|------------|----------|------------|\n| Data breach | Medium | High | Encryption, access controls |\n| Unauthorized access | Low | High | 2FA, audit logs |\n| Purpose creep | Medium | Medium | Purpose documentation, training |\n\n## Safeguards\n- [ ] Encryption at rest and in transit\n- [ ] Access controls and authentication\n- [ ] Regular security audits\n- [ ] Data minimization applied\n- [ ] Retention policies enforced\n- [ ] DPO consulted\n- [ ] Data subject rights mechanism in place\n\n## Conclusion\nProcessing is\u002Fis not acceptable with proposed safeguards.\n\nSigned: [Data Protection Officer]\nDate: [Assessment Date]\n```\n\n## Privacy Policy Requirements\n\n**Essential Elements:**\n```markdown\n# Privacy Policy\n\n## 1. Identity of Controller\nCompany Name, Address, Contact Information\nData Protection Officer: dpo@company.com\n\n## 2. Data We Collect\n- Account data: email, name\n- Usage data: pages visited, features used\n- Technical data: IP address, browser type\n\n## 3. Legal Basis for Processing\n- **Consent**: Marketing communications\n- **Contract**: Order fulfillment\n- **Legitimate Interest**: Fraud prevention\n- **Legal Obligation**: Tax records\n\n## 4. How We Use Your Data\n- Provide services you requested\n- Improve our products\n- Send important updates\n- [Be specific, avoid vague statements]\n\n## 5. Data Sharing\n- Payment processors (Stripe, PayPal)\n- Shipping providers (FedEx, UPS)\n- Analytics (Google Analytics)\n\nWe do NOT sell your personal data.\n\n## 6. Your Rights\n- Right to access your data\n- Right to correct inaccuracies\n- Right to delete your data\n- Right to object to processing\n- Right to data portability\n- Right to withdraw consent\n\nContact: privacy@company.com\n\n## 7. Data Retention\n- Account data: Until account deletion + 30 days\n- Order history: 7 years (legal requirement)\n- Marketing data: 1 year or until opt-out\n\n## 8. Security\nWe use industry-standard security measures including\nencryption, secure servers, and regular security audits.\n\n## 9. International Transfers\nData may be transferred to US servers. We use Standard\nContractual Clauses approved by the EU Commission.\n\n## 10. Changes to Policy\nLast updated: [Date]\nWe will notify you of material changes via email.\n\n## 11. Contact\nQuestions? Contact our Data Protection Officer at dpo@company.com\n```\n\n## Incident Response\n\n### Data Breach Response Plan\n\n**Within 72 Hours (GDPR):**\n```markdown\n1. **Detect & Contain** (0-4 hours)\n   - Identify scope of breach\n   - Isolate affected systems\n   - Prevent further data loss\n\n2. **Assess** (4-24 hours)\n   - Determine data types affected\n   - Identify number of individuals\n   - Assess risk to rights and freedoms\n   - Document everything\n\n3. **Notify Authority** (24-72 hours)\n   - Report to supervisory authority\n   - Include: nature, categories, approximate numbers,\n     likely consequences, measures taken\n\n4. **Notify Data Subjects** (ASAP if high risk)\n   - Direct communication required\n   - Describe breach in clear language\n   - Provide recommendations for protection\n```\n\n**Breach Notification Template:**\n```\nSubject: Important Security Notice\n\nDear [Name],\n\nWe are writing to inform you of a data security incident that may\nhave affected your personal information.\n\nWHAT HAPPENED:\nOn [date], we discovered that [brief description].\n\nWHAT INFORMATION WAS INVOLVED:\n[List specific data types: name, email, etc.]\n[List what was NOT involved]\n\nWHAT WE ARE DOING:\n- [Immediate actions taken]\n- [Ongoing security enhancements]\n- [Resources provided to affected individuals]\n\nWHAT YOU CAN DO:\n- Change your password immediately\n- Monitor your accounts for suspicious activity\n- [Specific recommendations]\n\nFOR MORE INFORMATION:\nContact our dedicated hotline: [phone]\nEmail: security@company.com\n\nWe sincerely apologize for this incident and the inconvenience\nit may cause.\n\nSincerely,\n[Name, Title]\n```\n\n## Compliance Checklist\n\n### GDPR Compliance\n- [ ] Lawful basis documented for all processing\n- [ ] Privacy policy published and accessible\n- [ ] Consent mechanism implements granular controls\n- [ ] Data subject rights request process established\n- [ ] Records of processing activities maintained\n- [ ] Data Protection Officer appointed (if required)\n- [ ] DPIA conducted for high-risk processing\n- [ ] Data breach notification procedure in place\n- [ ] Vendor contracts include data processing agreements\n- [ ] International data transfer safeguards implemented\n- [ ] Staff training on data protection completed\n\n### CCPA Compliance\n- [ ] \"Do Not Sell My Personal Information\" link on homepage\n- [ ] Privacy policy discloses data collection and sales\n- [ ] Mechanisms for verifiable consumer requests\n- [ ] Process for opt-out requests (48-hour response)\n- [ ] Annual report on requests and compliance\n- [ ] Service provider agreements updated\n- [ ] Notice at collection provided\n\n### HIPAA Compliance\n- [ ] Risk assessment completed\n- [ ] Security policies and procedures documented\n- [ ] Workforce trained on HIPAA requirements\n- [ ] Business Associate Agreements signed\n- [ ] Access controls and audit trails implemented\n- [ ] Encryption for ePHI\n- [ ] Breach notification procedures established\n- [ ] Contingency plan and disaster recovery\n\nPrivacy compliance is an ongoing process, not a one-time checklist. Regularly review and update practices as regulations evolve and your data processing changes.\n","# Data Privacy Compliance\n\nComprehensive guidance for implementing data privacy compliance across GDPR, CCPA, HIPAA, and other global data protection regulations.\n\n## When to Use This Skill\n\nUse this skill when:\n- Implementing GDPR, CCPA, or HIPAA compliance\n- Conducting Data Protection Impact Assessments (DPIA)\n- Managing data subject rights (access, deletion, portability)\n- Implementing consent management systems\n- Drafting privacy policies and notices\n- Handling data breaches and incident response\n- Designing privacy-by-design systems\n- Conducting privacy audits and assessments\n\n## Key Regulations Overview\n\n### GDPR (General Data Protection Regulation)\n**Scope:** EU residents' data, regardless of where company is located\n**Key Requirements:**\n- Lawful basis for processing (consent, contract, legitimate interest, etc.)\n- Data subject rights (access, deletion, portability, objection)\n- Data Protection Impact Assessments for high-risk processing\n- 72-hour breach notification requirement\n- Records of processing activities\n- Privacy by design and by default\n\n**Penalties:** Up to €20M or 4% of global annual revenue\n\n### CCPA\u002FCPRA (California Consumer Privacy Act)\n**Scope:** California residents' data\n**Key Requirements:**\n- Right to know what data is collected\n- Right to delete personal information\n- Right to opt-out of sale\u002Fsharing\n- Right to correct inaccurate information\n- Right to limit use of sensitive personal information\n\n**Penalties:** Up to $7,500 per intentional violation\n\n### HIPAA (Health Insurance Portability and Accountability Act)\n**Scope:** Protected Health Information (PHI) in the US\n**Key Requirements:**\n- Privacy Rule (patient rights and information uses)\n- Security Rule (safeguards for ePHI)\n- Breach Notification Rule (60-day notification)\n- Business Associate Agreements (BAAs)\n\n**Penalties:** Up to $1.5M per violation category per year\n\n## Data Subject Rights Implementation\n\n### 1. Right to Access (GDPR Art. 15 \u002F CCPA § 1798.100)\n\n**Request Handler:**\n```javascript\nasync function handleAccessRequest(userId, email) {\n  \u002F\u002F Verify identity\n  const verified = await verifyIdentity(email);\n  if (!verified) throw new Error('Identity verification failed');\n\n  \u002F\u002F Collect all personal data\n  const userData = await collectUserData(userId);\n\n  \u002F\u002F Format for readability\n  const report = {\n    personalInfo: userData.profile,\n    activityLogs: userData.activities,\n    preferences: userData.settings,\n    thirdPartySharing: userData.dataSharing,\n    retentionPeriod: '2 years from last activity',\n    dataProtectionOfficer: 'dpo@company.com'\n  };\n\n  \u002F\u002F Generate downloadable report\n  const pdf = await generatePDFReport(report);\n\n  \u002F\u002F Log request for compliance\n  await logAccessRequest(userId, 'completed');\n\n  return pdf;\n}\n```\n\n**Response Timeline:**\n- GDPR: 1 month (extendable to 3 months)\n- CCPA: 45 days (extendable to 90 days)\n\n### 2. Right to Deletion (GDPR Art. 17 \u002F CCPA § 1798.105)\n\n**Deletion Handler:**\n```javascript\nasync function handleDeletionRequest(userId, email) {\n  \u002F\u002F Verify identity\n  const verified = await verifyIdentity(email);\n  if (!verified) throw new Error('Identity verification failed');\n\n  \u002F\u002F Check for legal obligations to retain\n  const mustRetain = await checkRetentionRequirements(userId);\n  if (mustRetain.required) {\n    return {\n      status: 'partial_deletion',\n      retained: mustRetain.data,\n      reason: mustRetain.legalBasis,\n      retentionPeriod: mustRetain.period\n    };\n  }\n\n  \u002F\u002F Delete from all systems\n  await Promise.all([\n    deleteFromDatabase(userId),\n    deleteFromBackups(userId), \u002F\u002F Mark for deletion in next backup cycle\n    deleteFromAnalytics(userId),\n    deleteFromThirdPartyServices(userId),\n    revokeAPIKeys(userId),\n    anonymizeHistoricalRecords(userId)\n  ]);\n\n  \u002F\u002F Confirm deletion\n  await sendDeletionConfirmation(email);\n  await logDeletionRequest(userId, 'completed');\n\n  return { status: 'deleted', timestamp: new Date() };\n}\n```\n\n**Exceptions (when deletion can be refused):**\n- Legal obligations (tax records, contracts)\n- Public interest\u002Fscientific research\n- Defense of legal claims\n- Exercise of freedom of expression\n\n### 3. Right to Data Portability (GDPR Art. 20)\n\n**Export Handler:**\n```javascript\nasync function handlePortabilityRequest(userId, format = 'json') {\n  const userData = await collectUserData(userId);\n\n  \u002F\u002F Structure in machine-readable format\n  const portableData = {\n    exportDate: new Date().toISOString(),\n    userId: userId,\n    data: {\n      profile: userData.profile,\n      content: userData.userGeneratedContent,\n      settings: userData.preferences,\n      history: userData.activityHistory\n    }\n  };\n\n  \u002F\u002F Support multiple formats\n  if (format === 'csv') {\n    return convertToCSV(portableData);\n  } else if (format === 'xml') {\n    return convertToXML(portableData);\n  }\n\n  return portableData; \u002F\u002F JSON by default\n}\n```\n\n**Requirements:**\n- Structured, commonly used, machine-readable format\n- Ability to transmit directly to another controller\n- Only applies to data provided by data subject\n- Only for automated processing based on consent or contract\n\n### 4. Right to Object (GDPR Art. 21)\n\n**Objection Handler:**\n```javascript\nasync function handleObjectionRequest(userId, processingType) {\n  switch (processingType) {\n    case 'direct_marketing':\n      \u002F\u002F Must stop immediately\n      await disableMarketing(userId);\n      await updateConsent(userId, 'marketing', false);\n      break;\n\n    case 'legitimate_interest':\n      \u002F\u002F Assess if we have compelling grounds\n      const assessment = await assessLegitimateInterest(userId);\n      if (!assessment.compelling) {\n        await stopProcessing(userId, processingType);\n      }\n      return assessment;\n\n    case 'profiling':\n      await disableProfiling(userId);\n      await updateConsent(userId, 'profiling', false);\n      break;\n\n    default:\n      throw new Error('Invalid processing type');\n  }\n\n  await logObjectionRequest(userId, processingType, 'granted');\n}\n```\n\n## Consent Management\n\n### Consent Requirements (GDPR)\n\n**Valid Consent Must Be:**\n1. Freely given (no coercion)\n2. Specific (for each purpose)\n3. Informed (clear language)\n4. Unambiguous (clear affirmative action)\n5. Withdrawable (as easy to withdraw as to give)\n\n**Consent Implementation:**\n```html\n\u003C!-- Good: Granular consent -->\n\u003Cform>\n  \u003Ch3>Privacy Preferences\u003C\u002Fh3>\n\n  \u003Clabel>\n    \u003Cinput type=\"checkbox\" name=\"essential\" checked disabled>\n    \u003Cstrong>Essential cookies (Required)\u003C\u002Fstrong>\n    \u003Cp>Necessary for website functionality\u003C\u002Fp>\n  \u003C\u002Flabel>\n\n  \u003Clabel>\n    \u003Cinput type=\"checkbox\" name=\"analytics\" value=\"analytics\">\n    \u003Cstrong>Analytics cookies\u003C\u002Fstrong>\n    \u003Cp>Help us improve our website by collecting usage data\u003C\u002Fp>\n  \u003C\u002Flabel>\n\n  \u003Clabel>\n    \u003Cinput type=\"checkbox\" name=\"marketing\" value=\"marketing\">\n    \u003Cstrong>Marketing cookies\u003C\u002Fstrong>\n    \u003Cp>Show you personalized ads based on your interests\u003C\u002Fp>\n  \u003C\u002Flabel>\n\n  \u003Cbutton type=\"submit\">Save Preferences\u003C\u002Fbutton>\n  \u003Ca href=\"\u002Fprivacy-policy\">Learn More\u003C\u002Fa>\n\u003C\u002Fform>\n```\n\n**Consent Record Storage:**\n```javascript\nconst consentRecord = {\n  userId: 'user123',\n  timestamp: new Date().toISOString(),\n  consentVersion: '2.0',\n  purposes: {\n    essential: { granted: true, required: true },\n    analytics: { granted: true, purpose: 'Website improvement' },\n    marketing: { granted: false, purpose: 'Personalized advertising' }\n  },\n  ipAddress: '192.168.1.1', \u002F\u002F For proof\n  userAgent: 'Mozilla\u002F5.0...', \u002F\u002F For context\n  method: 'explicit_opt_in' \u002F\u002F or 'implicit', 'presumed'\n};\n\nawait saveConsentRecord(consentRecord);\n```\n\n### Cookie Banner (GDPR Compliant)\n\n```html\n\u003Cdiv id=\"cookie-banner\" role=\"dialog\" aria-labelledby=\"cookie-title\">\n  \u003Ch2 id=\"cookie-title\">Cookie Preferences\u003C\u002Fh2>\n  \u003Cp>\n    We use cookies to enhance your experience. Choose which cookies you\n    allow us to use. You can change your preferences at any time.\n  \u003C\u002Fp>\n\n  \u003Cbutton onclick=\"acceptAll()\">Accept All\u003C\u002Fbutton>\n  \u003Cbutton onclick=\"rejectNonEssential()\">Reject Non-Essential\u003C\u002Fbutton>\n  \u003Cbutton onclick=\"showPreferences()\">Manage Preferences\u003C\u002Fbutton>\n\u003C\u002Fdiv>\n\n\u003Cscript>\n\u002F\u002F Must not load non-essential cookies until consent given\nfunction acceptAll() {\n  setConsent({ analytics: true, marketing: true });\n  loadAnalyticsCookies();\n  loadMarketingCookies();\n  hideBanner();\n}\n\nfunction rejectNonEssential() {\n  setConsent({ analytics: false, marketing: false });\n  hideBanner();\n}\n\u003C\u002Fscript>\n```\n\n## Privacy by Design Principles\n\n### 1. Data Minimization\n\n**Principle:** Collect only data necessary for specified purpose\n\n**Implementation:**\n```javascript\n\u002F\u002F ❌ Bad: Collecting unnecessary data\nconst userRegistration = {\n  email: req.body.email,\n  password: req.body.password,\n  fullName: req.body.fullName,\n  phoneNumber: req.body.phoneNumber, \u002F\u002F Not needed\n  dateOfBirth: req.body.dateOfBirth, \u002F\u002F Not needed\n  address: req.body.address, \u002F\u002F Not needed\n  socialSecurityNumber: req.body.ssn \u002F\u002F Definitely not needed!\n};\n\n\u002F\u002F ✅ Good: Only essential data\nconst userRegistration = {\n  email: req.body.email,\n  password: hashPassword(req.body.password),\n  displayName: req.body.displayName \u002F\u002F Optional\n};\n```\n\n### 2. Purpose Limitation\n\n**Principle:** Use data only for specified, explicit purposes\n\n**Implementation:**\n```javascript\n\u002F\u002F Document and enforce purpose\nconst dataProcessingPurpose = {\n  email: [\n    'account_authentication',\n    'order_confirmations',\n    'password_reset'\n  ],\n  phoneNumber: [\n    'order_delivery_notifications'\n    \u002F\u002F NOT: 'marketing_calls' (requires separate consent)\n  ],\n  purchaseHistory: [\n    'order_fulfillment',\n    'customer_support'\n    \u002F\u002F NOT: 'targeted_advertising' (requires separate consent)\n  ]\n};\n\nasync function processData(data, purpose) {\n  if (!isAllowedPurpose(data.type, purpose)) {\n    throw new Error('Purpose not authorized for this data');\n  }\n  \u002F\u002F Proceed with processing\n}\n```\n\n### 3. Storage Limitation\n\n**Principle:** Retain data only as long as necessary\n\n**Implementation:**\n```javascript\nconst retentionPolicy = {\n  userAccounts: {\n    active: 'indefinite',\n    inactive: '2 years',\n    deleted: '30 days grace period'\n  },\n  orderRecords: '7 years', \u002F\u002F Legal requirement\n  supportTickets: '3 years',\n  analytics: '26 months',\n  marketingData: '1 year or until consent withdrawn'\n};\n\n\u002F\u002F Automated data deletion\nasync function enforceRetentionPolicy() {\n  const now = new Date();\n\n  \u002F\u002F Delete inactive accounts\n  await User.deleteMany({\n    lastActive: { $lt: subYears(now, 2) },\n    status: 'inactive'\n  });\n\n  \u002F\u002F Anonymize old analytics\n  await Analytics.updateMany(\n    { createdAt: { $lt: subMonths(now, 26) } },\n    { $unset: { userId: 1, ipAddress: 1 } }\n  );\n\n  \u002F\u002F Delete expired marketing consent\n  await MarketingConsent.deleteMany({\n    $or: [\n      { expiresAt: { $lt: now } },\n      { withdrawnAt: { $lt: subDays(now, 30) } }\n    ]\n  });\n}\n\n\u002F\u002F Schedule daily\ncron.schedule('0 2 * * *', enforceRetentionPolicy);\n```\n\n## Data Protection Impact Assessment (DPIA)\n\n**When Required (GDPR Art. 35):**\n- Systematic and extensive profiling\n- Large-scale processing of sensitive data\n- Systematic monitoring of publicly accessible areas\n- New technologies with high privacy risks\n\n**DPIA Template:**\n```markdown\n# Data Protection Impact Assessment\n\n## Processing Overview\n- **Purpose**: [Describe the processing activity]\n- **Data Types**: [Personal data categories]\n- **Data Subjects**: [Who is affected]\n- **Recipients**: [Who receives the data]\n\n## Necessity Assessment\n- [ ] Is processing necessary for the stated purpose?\n- [ ] Could the purpose be achieved with less data?\n- [ ] Is the retention period justified?\n\n## Risk Assessment\n| Risk | Likelihood | Severity | Mitigation |\n|------|------------|----------|------------|\n| Data breach | Medium | High | Encryption, access controls |\n| Unauthorized access | Low | High | 2FA, audit logs |\n| Purpose creep | Medium | Medium | Purpose documentation, training |\n\n## Safeguards\n- [ ] Encryption at rest and in transit\n- [ ] Access controls and authentication\n- [ ] Regular security audits\n- [ ] Data minimization applied\n- [ ] Retention policies enforced\n- [ ] DPO consulted\n- [ ] Data subject rights mechanism in place\n\n## Conclusion\nProcessing is\u002Fis not acceptable with proposed safeguards.\n\nSigned: [Data Protection Officer]\nDate: [Assessment Date]\n```\n\n## Privacy Policy Requirements\n\n**Essential Elements:**\n```markdown\n# Privacy Policy\n\n## 1. Identity of Controller\nCompany Name, Address, Contact Information\nData Protection Officer: dpo@company.com\n\n## 2. Data We Collect\n- Account data: email, name\n- Usage data: pages visited, features used\n- Technical data: IP address, browser type\n\n## 3. Legal Basis for Processing\n- **Consent**: Marketing communications\n- **Contract**: Order fulfillment\n- **Legitimate Interest**: Fraud prevention\n- **Legal Obligation**: Tax records\n\n## 4. How We Use Your Data\n- Provide services you requested\n- Improve our products\n- Send important updates\n- [Be specific, avoid vague statements]\n\n## 5. Data Sharing\n- Payment processors (Stripe, PayPal)\n- Shipping providers (FedEx, UPS)\n- Analytics (Google Analytics)\n\nWe do NOT sell your personal data.\n\n## 6. Your Rights\n- Right to access your data\n- Right to correct inaccuracies\n- Right to delete your data\n- Right to object to processing\n- Right to data portability\n- Right to withdraw consent\n\nContact: privacy@company.com\n\n## 7. Data Retention\n- Account data: Until account deletion + 30 days\n- Order history: 7 years (legal requirement)\n- Marketing data: 1 year or until opt-out\n\n## 8. Security\nWe use industry-standard security measures including\nencryption, secure servers, and regular security audits.\n\n## 9. International Transfers\nData may be transferred to US servers. We use Standard\nContractual Clauses approved by the EU Commission.\n\n## 10. Changes to Policy\nLast updated: [Date]\nWe will notify you of material changes via email.\n\n## 11. Contact\nQuestions? Contact our Data Protection Officer at dpo@company.com\n```\n\n## Incident Response\n\n### Data Breach Response Plan\n\n**Within 72 Hours (GDPR):**\n```markdown\n1. **Detect & Contain** (0-4 hours)\n   - Identify scope of breach\n   - Isolate affected systems\n   - Prevent further data loss\n\n2. **Assess** (4-24 hours)\n   - Determine data types affected\n   - Identify number of individuals\n   - Assess risk to rights and freedoms\n   - Document everything\n\n3. **Notify Authority** (24-72 hours)\n   - Report to supervisory authority\n   - Include: nature, categories, approximate numbers,\n     likely consequences, measures taken\n\n4. **Notify Data Subjects** (ASAP if high risk)\n   - Direct communication required\n   - Describe breach in clear language\n   - Provide recommendations for protection\n```\n\n**Breach Notification Template:**\n```\nSubject: Important Security Notice\n\nDear [Name],\n\nWe are writing to inform you of a data security incident that may\nhave affected your personal information.\n\nWHAT HAPPENED:\nOn [date], we discovered that [brief description].\n\nWHAT INFORMATION WAS INVOLVED:\n[List specific data types: name, email, etc.]\n[List what was NOT involved]\n\nWHAT WE ARE DOING:\n- [Immediate actions taken]\n- [Ongoing security enhancements]\n- [Resources provided to affected individuals]\n\nWHAT YOU CAN DO:\n- Change your password immediately\n- Monitor your accounts for suspicious activity\n- [Specific recommendations]\n\nFOR MORE INFORMATION:\nContact our dedicated hotline: [phone]\nEmail: security@company.com\n\nWe sincerely apologize for this incident and the inconvenience\nit may cause.\n\nSincerely,\n[Name, Title]\n```\n\n## Compliance Checklist\n\n### GDPR Compliance\n- [ ] Lawful basis documented for all processing\n- [ ] Privacy policy published and accessible\n- [ ] Consent mechanism implements granular controls\n- [ ] Data subject rights request process established\n- [ ] Records of processing activities maintained\n- [ ] Data Protection Officer appointed (if required)\n- [ ] DPIA conducted for high-risk processing\n- [ ] Data breach notification procedure in place\n- [ ] Vendor contracts include data processing agreements\n- [ ] International data transfer safeguards implemented\n- [ ] Staff training on data protection completed\n\n### CCPA Compliance\n- [ ] \"Do Not Sell My Personal Information\" link on homepage\n- [ ] Privacy policy discloses data collection and sales\n- [ ] Mechanisms for verifiable consumer requests\n- [ ] Process for opt-out requests (48-hour response)\n- [ ] Annual report on requests and compliance\n- [ ] Service provider agreements updated\n- [ ] Notice at collection provided\n\n### HIPAA Compliance\n- [ ] Risk assessment completed\n- [ ] Security policies and procedures documented\n- [ ] Workforce trained on HIPAA requirements\n- [ ] Business Associate Agreements signed\n- [ ] Access controls and audit trails implemented\n- [ ] Encryption for ePHI\n- [ ] Breach notification procedures established\n- [ ] Contingency plan and disaster recovery\n\nPrivacy compliance is an ongoing process, not a one-time checklist. Regularly review and update practices as regulations evolve and your data processing changes.\n",{"name":5,"description":7},"main","2b749c82b5d11fac39d9a6e021ce3f5b8a541bd1","cli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fdata-privacy-compliance",3931,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates","https:\u002F\u002Faitmpl.com","https:\u002F\u002Fgithub.com\u002Fdavila7","https:\u002F\u002Fdanielavila.me","Building AI dev tools with LLMs","2026-11-14 06:14:46",{"source":8,"skillName":5,"commands":70,"prompt":80,"zipAvailable":81},[71,74,77],{"tool":72,"command":73},"npx","npx skills add davila7\u002Fclaude-code-templates --skill data-privacy-compliance",{"tool":75,"command":76},"bunx","bunx skills add davila7\u002Fclaude-code-templates --skill data-privacy-compliance",{"tool":78,"command":79},"pnpm","pnpm dlx skills add davila7\u002Fclaude-code-templates --skill data-privacy-compliance","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fdata-privacy-compliance\u002FSKILL.md",true,[83,89,93,97,103],{"path":84,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":87,"sourceHtmlUrl":88},"references\u002Fboard_governance_investor_relations.md","REFERENCE","参考文档",11661,"https:\u002F\u002Fgithub.com\u002Fshengdabai\u002FTony-Claude-Code-Skills\u002Fblob\u002Fmain\u002Fskills\u002Frsmdt-the-startup\u002Falirezarezvani-claude-skills\u002Fc-level-advisor\u002Fceo-advisor\u002Freferences\u002Fboard_governance_investor_relations.md",{"path":90,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":91,"sourceHtmlUrl":92},"references\u002Fexecutive_decision_framework.md",11112,"https:\u002F\u002Fgithub.com\u002Fshengdabai\u002FTony-Claude-Code-Skills\u002Fblob\u002Fmain\u002Fskills\u002Frsmdt-the-startup\u002Falirezarezvani-claude-skills\u002Fc-level-advisor\u002Fceo-advisor\u002Freferences\u002Fexecutive_decision_framework.md",{"path":94,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":95,"sourceHtmlUrl":96},"references\u002Fleadership_organizational_culture.md",14703,"https:\u002F\u002Fgithub.com\u002Fshengdabai\u002FTony-Claude-Code-Skills\u002Fblob\u002Fmain\u002Fskills\u002Frsmdt-the-startup\u002Falirezarezvani-claude-skills\u002Fc-level-advisor\u002Fceo-advisor\u002Freferences\u002Fleadership_organizational_culture.md",{"path":98,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":101,"sourceHtmlUrl":102},"scripts\u002Ffinancial_scenario_analyzer.py","SCRIPT","脚本",17693,"https:\u002F\u002Fgithub.com\u002Fshengdabai\u002FTony-Claude-Code-Skills\u002Fblob\u002Fmain\u002Fskills\u002Frsmdt-the-startup\u002Falirezarezvani-claude-skills\u002Fc-level-advisor\u002Fceo-advisor\u002Fscripts\u002Ffinancial_scenario_analyzer.py",{"path":104,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":105,"sourceHtmlUrl":106},"scripts\u002Fstrategy_analyzer.py",23352,"https:\u002F\u002Fgithub.com\u002Fshengdabai\u002FTony-Claude-Code-Skills\u002Fblob\u002Fmain\u002Fskills\u002Frsmdt-the-startup\u002Falirezarezvani-claude-skills\u002Fc-level-advisor\u002Fceo-advisor\u002Fscripts\u002Fstrategy_analyzer.py",[108,135,162,191,226,250],{"skillNo":109,"name":110,"nameZh":6,"description":111,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":112,"categories":113,"keywords":117,"publishedAt":54},"01M70NHBTQ8BV0A2SCAZXEPHCX","wealthville-pool-scoring","Score DeFi liquidity pools before providing liquidity. Returns a 0-100 pool score and an Enter\u002FHold\u002FExit\u002FReduce\u002FAvoid verdict with calibrated confidence for ~68,800 Solana pools and 575 EVM pools, plus a public miss-inclusive track record. Use when asked whether a pool is worth LPing into, which pools look best right now, or how accurate the scores have actually been.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fweb-data\u002Fwealthville-pool-scoring\u002FSKILL.md",[114],{"categoryNo":115,"categoryName":116,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[118,119,120,121,122,40,123,124,48,38,125,126,127,128,129,130,131,132,133,134],"scoring","pool","wealthville pool scoring","liquidity","which","exit","now","reduce","with","record","track","verdict","evm","solana","how","public","look",{"skillNo":136,"name":137,"nameZh":6,"description":138,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":139,"categories":140,"keywords":142,"publishedAt":54},"01M70MB6VR8ERJ4EM8D5KHBMEV","technical-debt-auditor","Scans a codebase and produces a quantified technical debt report with a prioritized remediation plan. Analyzes dead code, TODO\u002FFIXME\u002FHACK markers, dependency staleness, complexity hotspots, code duplication signals, test coverage gaps, unused exports, and outdated patterns. Use this skill when the user asks to audit their codebase for tech debt, wants a health check of their code quality, says things like \"where should I focus refactoring\", \"find code smells\", \"audit my codebase\", \"what technical debt do we have\", \"prioritize cleanup work\", or asks about code quality metrics. Also trigger when the user mentions \"code rot\", \"legacy cleanup\", \"refactoring priorities\", or wants to understand the overall health of a project before a major effort. Trigger even if the user doesn't say \"technical debt\" explicitly — any request to systematically assess code quality and identify improvement priorities belongs here.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fdevelopment\u002Ftechnical-debt-auditor\u002FSKILL.md",[141],{"categoryNo":115,"categoryName":116,"taxonomyType":21,"taxonomyTypeDesc":22},[143,144,145,146,147,148,149,150,151,152,153,38,154,155,156,157,158,159,160,161],"technical debt","debt","technical","technical debt auditor","auditor","coverage","complexity","markers","project","cleanup","unused","code","todo","work","plan","focus","signals","audit","dependency",{"skillNo":163,"name":164,"nameZh":6,"description":165,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":166,"categories":167,"keywords":173,"publishedAt":54},"01M70KPYH9QNHCNME5GJQGE22K","readonly-sql-guard","Make an agent's database access provably read-only. Use when an agent runs caller-supplied SQL against a production\u002FERP\u002Fanalytics database (a \"query\" MCP tool, text-to-SQL, an admin console), or when reviewing DB-access code for write\u002FDDL\u002Fside-effect\u002Ftransaction-escape risks. Checks what a statement CALLS, not just its shape.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fdatabase\u002Freadonly-sql-guard\u002FSKILL.md",[168,171,172],{"categoryNo":169,"categoryName":170,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":115,"categoryName":116,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":24,"categoryName":25,"taxonomyType":26,"taxonomyTypeDesc":27},[174,175,176,177,178,179,180,40,181,182,183,184,185,186,187,48,188,189,38,190],"readonly","guard","sql guard","sql","readonly sql guard","erp","effect","read-only","db","just","tool","calls","only","MCP","access","database","query",{"skillNo":192,"name":193,"nameZh":6,"description":194,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":195,"licenseFileUrl":196,"sourceHtmlUrl":197,"categories":198,"keywords":202,"publishedAt":54},"01M6AFY6F7CC2BBZP1QD6VTNVC","web-artifacts-builder","Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn\u002Fui). Use for complex artifacts requiring state management, routing, or shadcn\u002Fui components - not for simple single-file HTML\u002FJSX artifacts.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FSKILL.md",[199],{"categoryNo":200,"categoryName":201,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000009","前端开发",[203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,40,225],"artifacts builder","web","web artifacts builder","artifacts","builder","state","routing","state management","component","css","frontend","ui","Tools","file","components","shadcn","react","Tailwind","suite","jsx","html","single-file","ui components",{"skillNo":227,"name":228,"nameZh":6,"description":229,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":195,"licenseFileUrl":230,"sourceHtmlUrl":231,"categories":232,"keywords":237,"publishedAt":54},"01M6AFWF33SFV9Z3SF4PEEE4BF","webapp-testing","Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FSKILL.md",[233,236],{"categoryNo":234,"categoryName":235,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":200,"categoryName":201,"taxonomyType":21,"taxonomyTypeDesc":22},[238,239,240,241,242,204,243,213,214,244,245,246,247,40,248,126,249],"webapp testing","testing","webapp","browser","playwright","applications","debugging","toolkit","logs","screenshots","local","behavior",{"skillNo":251,"name":252,"nameZh":6,"description":253,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":195,"licenseFileUrl":254,"sourceHtmlUrl":255,"categories":256,"keywords":264,"publishedAt":54},"01M6AF67Q67JJJ5V51JR2P52KA","discernment-nudge","After you give a substantive answer or draft that the user may act on — advice or recommendations, drafted artifacts such as goals, plans, pitches, proposals, or emails, estimates or projections, analysis or interpretation of data, factual claims they may rely on, or a multi-step argument — invoke this skill BEFORE finalizing your reply and then, if it applies, append 2-3 short follow-up questions, each tied to something specific in what you just produced, that help the user check key facts, probe the reasoning or assumptions, and notice missing context. Do this at most once per conversation. Skip it when the user asked a trivial how-to or simple lookup, wants a purely educational explanation, asked you only to format, convert, or assemble a file from content they provided, is writing code they will run, is doing creative writing or casual chat, or already asked you to double-check, cite, or review — the skill file explains these boundaries and the exact output format.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fdiscernment-nudge\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fdiscernment-nudge\u002FSKILL.md",[257,260,261],{"categoryNo":258,"categoryName":259,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":115,"categoryName":116,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":262,"categoryName":263,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000036","内容创作者",[265,266,267,268,269,270,36,271,206,272,216,154,273,274,275,276,277,186,278,38,279,280,281,282,283,132,284],"discernment nudge","nudge","interpretation","help","run","reasoning","writing","lookup","content","review","conversation","short","up","invoke","you","analysis","claims","argument","assemble","recommendations"]