CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

dpdpa

Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations, Data Principal rights, Significant Data Fiduciary, Data Protection Board of India, consent under DPDPA, notice requirements, breach notification India, children's data India, cross-border data transfer India, India privacy compliance, DPDPA gap analysis, DPDPA vs GDPR, or any obligation under India's personal data protection framework. Also trigger for: "Section 6 consent", "Section 7 legitimate uses", "Section 9 children's data", "Section 10 SDF", "Section 16 cross-border", "Rule 6 breach notification", "Rule 13 SDF obligations", "Data Protection Board complaint", "verifiable parental consent India", "DPDPA compliance roadmap", or "India privacy law global company".

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a dense, well-organized DPDPA knowledge base with strong task-to-output-format actionability, precise terminology rules, and verified one-level-deep references. Its principal weakness is token efficiency: substantial section-by-section detail and gap-analysis tables duplicate the reference files instead of SKILL.md staying a leaner overview, and a few task types defer procedures without inline worked examples.

Suggestions

Condense the chapter-by-chapter detail (Sections 4–17) and the penalty/exemption tables into a high-level summary in the body, pointing to references/sections-reference.md and references/rules-2025.md, which already cover this material in greater depth — this could roughly halve the body's token footprint.

Move the three gap-analysis tables into a dedicated reference file, keeping only the task-to-format mapping and one sample filled-in gap-analysis row in the body.

Add a short worked example for the highest-frequency tasks (e.g., a completed gap-analysis row or a Rule 3 notice skeleton) so each output format has a concrete anchor in SKILL.md.

DimensionReasoningScore

Conciseness

The body is information-dense and covers recent law (DPDP Rules 2025) Claude cannot be assumed to know, but at ~430 lines it inlines substantial deep material — the full chapter-by-chapter breakdown, penalty and exemption tables, and three gap-analysis tables — that duplicates references/sections-reference.md, references/rights-and-obligations.md, and references/rules-2025.md. It exceeds 'some unnecessary explanation' but is well short of padded; it sits between anchors 2 and 3, and dense non-redundant legal content keeps it at 3.

3 / 5

Actionability

Concrete directives throughout: the 'How to Respond' table gives copy-paste-ready output formats per task (e.g., 'Gap analysis | Table: Section/Rule | Obligation | Status | Evidence Needed | Gap Notes'), the Rule 3 notice elements and Section 6 consent criteria are enumerated as checklists, and citation format is modeled with an example. It falls short of 5 because several task rows (rights request handling, breach notification) name the deliverable without giving the actual procedure or a worked example, deferring entirely to references.

4 / 5

Workflow Clarity

Task routing is unambiguous — identify task type, apply the mapped output format, cite sections, flag unnotified items, reflect the phase timeline — and the complaint process is a clearly sequenced 5-step list. No destructive or batch operations exist, so the validation-cap rule does not apply; minor gaps remain in that multi-step deliverables like breach response describe the output format but not Claude's step sequence.

4 / 5

Progressive Disclosure

All four referenced files (sections-reference.md, rights-and-obligations.md, rules-2025.md, gdpr-comparison.md) exist, are substantive, one level deep (no nested references), and are clearly signaled with descriptive one-liners in a Reference Files section. It misses 5 because the body inlines chapter-level and gap-analysis detail that belongs in those references rather than remaining a lean overview.

4 / 5

Total

15

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is exemplary: it names a precise niche, states the skill's purpose in third person, and provides an exhaustive, naturally-phrased trigger list including synonyms, statute citations, and task-specific phrases. Both 'what' and 'when' are answered explicitly with minimal conflict risk against other skills.

DimensionReasoningScore

Specificity

The core capability statement is a single action ('Expert India DPDPA compliance advisor'), but the text names several concrete task areas — 'DPDPA gap analysis', 'DPDPA vs GDPR', 'DPDPA compliance roadmap', 'breach notification India', 'children's data India', 'cross-border data transfer India' — matching anchor 4's 'several specific actions; minor gaps'. It is not 5 because these appear as trigger topics rather than stated capabilities, and the primary 'what' is one advising verb.

4 / 5

Completeness

Both questions are answered explicitly: 'what' via 'Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor', and 'when' via 'Use this skill whenever a user asks about...' followed by two long lists of concrete trigger phrases including section and rule citations. This is a textbook match for the anchor-5 example structure; the 'when' could not be more explicit.

5 / 5

Trigger Term Quality

Coverage is comprehensive with synonyms and statute-specific phrases users would naturally say: 'DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law', 'Data Fiduciary obligations', 'verifiable parental consent India', 'Section 6 consent', 'Rule 6 breach notification', 'India privacy law global company'. This clearly matches the top anchor (comprehensive natural terms including synonyms); nothing common is missing.

5 / 5

Distinctiveness Conflict Risk

A clear niche with distinctive India-specific terminology (Data Fiduciary, Data Principal, SDF, Data Protection Board of India, MeitY) that no generic privacy skill would claim. The only overlap surface is 'DPDPA vs GDPR', which is intentionally this skill's territory; conflict risk is minimal.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Path

plugins/dpdpa/skills/dpdpa/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.