CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

lgpd

Expert LGPD compliance advisor for Brazil's Lei Geral de Proteção de Dados (Law 13,709/2018). Use this skill whenever a user asks about LGPD, Brazilian data protection, ANPD, personal data processing in Brazil, data subject rights under Brazilian law, legal bases for processing, sensitive data handling, DPO appointment in Brazil, data breach notification to ANPD, LGPD penalties (fines up to 2% of revenue / R$50M), international data transfers from Brazil, Brazil-EU mutual adequacy (January 2026 — SCCs/BCRs no longer needed for Brazil-EU transfers), LGPD gap assessments, privacy policy drafting for Brazilian operations, DPIA under LGPD, consent management, or comparing LGPD with GDPR. Trigger for any Brazil privacy or data protection question even if LGPD is not named explicitly.

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured legal-compliance skill: dense table-based reference content, six clearly sequenced workflows with specific deadlines and article citations, and exemplary progressive disclosure with three described, real, one-level-deep reference files. Main gaps are modest: some content restates law Claude already knows or duplicates the references, and workflows lack explicit validation/error-recovery checkpoints and worked example outputs.

Suggestions

Trim or compress the body's restatements of law Claude already knows (e.g., the Art. 6 principles table and full Art. 7 basis list, which duplicate references/lgpd-articles.md) down to the Brazil-specific deltas, keeping only operational details like response timeframes inline.

Add one worked example per major deliverable — e.g., a sample gap-assessment table row and a short model privacy-notice excerpt — to lift the advisory guidance from concrete to copy-paste ready.

Strengthen workflow checkpoints with explicit fallback loops: e.g., in the legal-basis workflow, what to do when no Art. 7 basis fits (re-design the processing or refrain), and in request handling, the escalation path when data cannot be located or the deadline is at risk.

DimensionReasoningScore

Conciseness

The body is token-efficient for its density — nearly all legal content is in tables ('Key Principles (Art. 6)', 'Legal Bases (Art. 7) — 10 bases', rights with response timeframes) with no introductory padding. It sits at 4 rather than 5 because some structure Claude already knows is restated at length (principles and legal-basis tables overlap references/lgpd-articles.md), and the inline '⚠️ Major 2026 Update' block plus scattered dated items could be consolidated into the already-present status section.

4 / 5

Actionability

Guidance is concrete and executable for an instruction-only skill: a task-type-to-output-format table ('Gap assessment → Table: LGPD Requirement | Current State | Gap | Priority | Recommended Action'), workflows with exact legal deadlines ('3-working-day preliminary ANPD notification', '20-working-day full report'), and a required-elements checklist for privacy notices. It falls short of 5 only for lacking worked example outputs (e.g., a sample gap-table row or notice snippet) that would make deliverables copy-paste ready.

4 / 5

Workflow Clarity

All six workflows are clearly sequenced with conditional branches ('If using legitimate interest → conduct balancing test; document', 'Check if exemption applies (Art. 18, §3º, §4º)') and defined outputs ('Produce gap table with priority ratings'). It is not 5 because validation checkpoints are sometimes implicit and there are no feedback/error-recovery loops, e.g., what to do when no Art. 7 basis fits or when a rights request cannot be located in systems.

4 / 5

Progressive Disclosure

A dedicated 'Reference Files' section points to three real, verified, one-level-deep files (references/lgpd-articles.md, references/anpd-enforcement.md, references/compliance-program.md), each with a clear description of its contents, and no nested references inside them. The split is appropriate: the body serves as an operational quick-reference while article-by-article detail, enforcement history, and templates are offloaded. This matches the 5 anchor's structure; the 4 anchor would apply only with organization gaps, which are absent.

5 / 5

Total

17

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An excellent description: third-person voice, concrete capability enumeration, highly explicit 'use when' triggers with a broad catch-all for unnamed Brazil privacy questions, and a distinct jurisdictional niche. Dense with natural trigger terms rather than fluff, though it runs long with embedded specifics (fine caps, the January 2026 adequacy date) that add trigger value at some verbosity cost.

DimensionReasoningScore

Specificity

The description names the domain ('Expert LGPD compliance advisor for Brazil's Lei Geral de Proteção de Dados') and enumerates comprehensive concrete capabilities — 'LGPD gap assessments, privacy policy drafting for Brazilian operations, DPIA under LGPD, consent management', 'data breach notification to ANPD', 'comparing LGPD with GDPR' — matching the body's full task table. Coverage is comprehensive with no notable gaps, so it fits the 5 anchor rather than the 4 ('minor gaps in coverage').

5 / 5

Completeness

It explicitly answers both questions: what ('Expert LGPD compliance advisor for Brazil's Lei Geral de Proteção de Dados (Law 13,709/2018)') and when ('Use this skill whenever a user asks about LGPD... Trigger for any Brazil privacy or data protection question even if LGPD is not named explicitly') with concrete trigger phrases. This matches the 5 anchor exactly; the 4 anchor applies only when the 'when' could be more explicit, which is not the case here.

5 / 5

Trigger Term Quality

Trigger terms are extensive and natural: 'LGPD, Brazilian data protection, ANPD', 'data subject rights under Brazilian law', 'sensitive data handling', 'DPO appointment in Brazil', 'international data transfers', 'consent management', plus a catch-all ('any Brazil privacy or data protection question even if LGPD is not named explicitly'). Synonym coverage is comprehensive; not the 4 anchor since no common natural phrasing is missing.

5 / 5

Distinctiveness Conflict Risk

It occupies a clear niche (Brazilian data protection law) with distinct, jurisdiction-scoped triggers; the only overlap is with general GDPR skills via 'comparing LGPD with GDPR', which is itself a declared capability of this skill. Minimal conflict risk, matching the 5 anchor.

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Path

plugins/lgpd/skills/lgpd/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.