Regulatory risk scan
Skill eltntawy/idea-discovery-playbook/skills/regulatory-risk-scan
Screens software ideas for regulatory, compliance, and platform-policy risks before scaling validation or build. Use for regulated markets, compliance risk, HIPAA, fintech, legal tech, health AI, or privacy-heavy products.From its SKILL.md
npx -y skills add eltntawy/idea-discovery-playbook --skill regulatory-risk-scanAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
2.3 KB, 397 tokens by cl100k_base, as published. Nobody here has run it
Regulatory Risk Scan
Lightweight desk scan — not legal advice. Flag risks so validation and build plans include compliance work.
When to run
- Health, medical, mental health, children
- Money movement, lending, insurance, crypto
- Legal advice, immigration, employment law automation
- Biometrics, surveillance, scraping at scale
- EU/UK users (GDPR), US state privacy laws, sector rules (HIPAA, PCI, etc.)
Run early in discovery-playbook phase 1–2 if any trigger applies.
Checklist
| Area | Questions |
|---|---|
| Activity regulation | Is the activity regulated even if software is not? |
| Data | PII, PHI, financial data, minors — storage and processing? |
| Claims | Does marketing imply licensed outcome (medical, legal, financial)? |
| Third parties | API ToS, app store rules, ad platform policies |
| Geography | Which countries/states from day one? |
| AI-specific | Automated decisions, disclosure, training data rights |
Risk levels
| Level | Action |
|---|---|
| Low | Document assumptions; proceed with standard privacy |
| Medium | Add compliance tasks to v1 scope; consult professional before launch |
| High | Pause scale tests; narrow wedge or pivot; expert review required |
Output
Save to discovery/<topic-slug>/research/YYYY-MM-DD-<slug>-regulatory.md.
Sections: Facts, Assumptions, Risk table (area | level | mitigation | owner), Decision (proceed / narrow / pause), Next step.
Link from discovery-synthesis and cap Strong go if High risks lack mitigation plan.
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.