agentsclimarketplace

Assess privacy security regulatory

Skill alexe-ev/product-plugins/risk-compliance/skills/assess-privacy-security-regulatory

Skill library for AI agents — 15 product domains, 121 skills. Tells the agent what to ask, how to reason, and what to output.

Install
npx -y skills add alexe-ev/product-plugins --skill assess-privacy-security-regulatory

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Identify and assess privacy, security, and regulatory risks in product decisions and features. Use this skill when a product decision may have privacy, security, or compliance implications.

SKILL.md

2.6 KB, as published. Nobody here has run it

Assess Privacy, Security & Regulatory Risks

Purpose

Help product teams identify and evaluate privacy, security, and regulatory risks before they become problems.

Skill type

Conceptual skill

Use this skill when

  • A new feature collects, stores, or processes personal data
  • A product decision may have regulatory implications (GDPR, CCPA, HIPAA, etc.)
  • Security risks in a product area need to be assessed
  • A feature involves third-party data sharing or integrations
  • A market expansion brings new regulatory requirements

Do not use this skill when

  • The goal is a full legal or compliance audit (requires legal expertise)
  • The goal is technical security architecture (requires security engineering)

Required inputs

  • Feature or product decision being assessed
  • Data types involved (personal data, financial, health, etc.)
  • Target market/geography

Optional inputs

  • Existing privacy or compliance documentation
  • Known regulatory requirements
  • Third-party integrations involved
  • Data retention and access policies

Upstream context

Works best when:

  • Feature requirements are defined
  • Target market is known

Downstream handoff

Output can feed:

  • plan-risk-mitigation (risks identified here become the input for mitigation planning)
  • write-requirements-prd (privacy/security requirements feed product requirements)

Instructions

  1. Identify all personal, sensitive, or regulated data types involved.
  2. Identify applicable regulations by geography and data type.
  3. Assess privacy risks: data collection, storage, access, sharing, and retention.
  4. Assess security risks: attack surface, data exposure, access controls.
  5. Identify consent, transparency, and user rights requirements.
  6. Flag items that require legal or security engineering review.

Output

Provide:

  • Data types and classification
  • Applicable regulations
  • Privacy risk assessment
  • Security risk assessment
  • Consent and transparency requirements
  • User rights implications (right to access, delete, export)
  • Items requiring legal or security review
  • Recommended mitigations

Risks / caveats

  • This skill does not replace legal or security review — it surfaces risks, not final answers
  • Regulatory requirements vary by jurisdiction — always verify with legal
  • Privacy risks often emerge later in development when they're harder to fix — assess early

Gives 0 of the 12 instructions most security skills give

Counted across 648 of the 828 authors here whose files we hold, read 2026-08-06

  • parameterize all database queriesin 67 of 648, across 49 files
  • hash passwords using bcrypt scrypt or argon2in 48 of 648, across 35 files
  • apply rate limiting to authentication endpointsin 48 of 648, across 24 files
  • Configure security headersin 35 of 648, across 18 files
  • validate all inputsin 32 of 648, across 24 files
  • validate all external input at the system boundaryin 29 of 648, across 18 files
  • run containers as a non-root userin 28 of 648, across 15 files
  • use httponly secure samesite cookies for sessionsin 26 of 648, across 15 files
  • run dependency audits before every releasein 21 of 648, across 10 files
  • encode output to prevent cross-site scriptingin 21 of 648, across 10 files
  • copy dependencies before source codein 20 of 648, across 9 files
  • store secrets in environment variablesin 20 of 648, across 17 files

Said here and by no other author read

  • Identify all personal sensitive or regulated data types
  • Identify applicable regulations by geography and data type
  • Assess privacy risks across collection storage and access
  • Assess security risks including attack surface and exposure
  • Identify consent transparency and user rights requirements
  • Flag items requiring legal or security engineering review

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.