agentsclimarketplace

Privacy policy

Skill bromso/metapowers/plugins/legal/skills/privacy-policy

A Claude Code plugin that adds an agentic skills framework, with MCP's and a meta prompting processes. Inspired by "Superpowers" & "Figma Console MCP", but not just for development or design; but for all aspect within the digital production cycle.

Install
npx -y skills add bromso/metapowers --skill privacy-policy

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Draft GDPR/CCPA-compliant privacy policy

SKILL.md

3.7 KB, as published. Nobody here has run it

Privacy Policy

Draft a GDPR/CCPA-compliant privacy policy for "$ARGUMENTS". Generate a comprehensive privacy policy that satisfies major data protection regulations.

Note: AI-generated legal content does not constitute legal advice. Consult a qualified attorney.

Prerequisites

Check that .metapowers/legal/$ARGUMENTS/00-assess.md exists. If it does not exist, stop and tell the user:

"Run an Assess skill first (e.g. /legal:risk-assessment $ARGUMENTS) to generate the prerequisite assessment artifact."

If the user passes --skip-checks, bypass this check and log the skip to .metapowers/legal/$ARGUMENTS/skip-log.md with a timestamp and the reason "Prerequisite check skipped for privacy-policy".

Process

  1. Read inputs:

    • Read .metapowers/legal/$ARGUMENTS/00-assess.md for risk, jurisdiction, and data practice context

  2. Identify data practices:

    • What personal data is collected (categories and specific examples)
    • How data is collected (directly from users, automatically, from third parties)
    • Purposes for processing each data category
    • Lawful basis for processing under GDPR (consent, contract, legitimate interest, legal obligation, vital interest, public task)
    • Data sharing relationships with third parties
    • Data retention timelines per category
    • International data transfer mechanisms

  3. Draft GDPR Article 13/14 compliant sections:

    • Data Controller Identity and Contact — legal name, address, contact details, EU representative (if applicable)
    • Data Collected — categories with specific examples (identifiers, contact info, financial data, usage data, device data, location data, etc.)
    • Purposes and Lawful Basis — per-category breakdown of why data is processed and the legal basis for each
    • Data Sharing with Third Parties — who receives data, why, and in what capacity (processor vs. controller)
    • Data Retention Periods — per-category retention periods with rationale
    • User Rights — access, rectification, erasure, restriction, portability, objection, and how to exercise each right
    • Automated Decision-Making and Profiling — whether used, logic involved, significance and consequences, right to opt out
    • Cookie Usage — summary with link to full cookie policy
    • International Data Transfers — transfer mechanisms (SCCs, adequacy decisions, BCRs) and safeguards
    • Children's Privacy — age restrictions, COPPA compliance (if applicable), parental consent mechanisms
    • Policy Updates Procedure — how changes are communicated, effective date handling
    • DPO / Contact Information — Data Protection Officer details (if appointed), supervisory authority contact, complaint procedures

  4. Add CCPA-specific provisions (if applicable):

    • Categories of personal information collected (CCPA categories)
    • Right to know, right to delete, right to opt out of sale/sharing
    • "Do Not Sell or Share My Personal Information" link requirement
    • Financial incentive disclosures (if any)
    • Authorized agent procedures
    • Non-discrimination statement

  5. Write the artifact to .metapowers/legal/$ARGUMENTS/01-draft.md with frontmatter:

    ---
description: Privacy policy draft for $ARGUMENTS
---

Output

The privacy policy draft written to .metapowers/legal/$ARGUMENTS/01-draft.md. Present a summary to the user highlighting:

  • Regulations addressed (GDPR, CCPA, others)
  • Number of data categories documented
  • Third-party data sharing relationships identified
  • User rights enumerated
  • Areas flagged for attorney review (especially lawful basis determinations and transfer mechanisms)

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.