Conciseness

Every section carries domain-specific, non-generic knowledge Claude does not reliably have (regulator roles, 'controls split by role (CSP vs tenant)', '72-hour breach notification to SDAIA', 'fines up to SAR 5M per violation (doubling on repeat)') with no padding of concepts Claude already knows. The 5-anchor fits: lean, assumes competence, every token earns its place — not the 4-anchor, since there is no over-explanation to trim.

Actionability

Instruction-only skill with fully concrete guidance: a 6-item intake checklist, an applicability matrix with explicit 'applies when' conditions, a gap-table column spec ('Requirement/Domain | Control ref | Current state | Gap | Evidence needed | Priority'), real control-ID formats ('1-3-P-1-1 for CSP, 1-3-T-1-1 for tenant'), and a numbered market-entry sequence. Per the rubric's code-vs-instruction note, absence of code is not penalized when guidance is this actionable; it matches the 5-anchor's 'specific examples cover the common cases'.

Workflow Clarity

Clear three-step sequence with explicit ordering constraints ('Intake Gate (always run this first)', 'deliver before any detail', 'Never give framework detail before the applicability picture is set') and explicit checkpoints: 'ask if not stated; state your assumptions if you must proceed', 'When jurisdictional/sector facts are missing, ask', and 'advise confirming with SDAIA' for date-unstable items. It includes checklists (intake items, answer-completeness rules), matching the 5-anchor; there are no destructive or batch operations, so the validation cap does not apply.

Progressive Disclosure

The ~60-line body is an overview that routes detail to five real, verified reference files (all referenced paths exist, each ~24-32 lines, one level deep, no nested references), each listed with a one-line description under 'Reference Files' and signaled inline ('Full detail: references/saudi-pdpl.md', 'Cite specific IDs only from references/nca-ecc.md / references/nca-cloud-ccc.md'). This is the 5-anchor's 'clear overview with well-signaled one-level-deep references' structure, not the 4-anchor, since organization gaps are essentially absent.

Specificity

Multiple concrete actions are explicitly stated: 'a compliance router that first determines WHICH Saudi regulations apply', 'then guides framework-specific compliance', 'gap assessments', and 'mapping Saudi requirements to ISO 27001 / NIST CSF / SOC 2'. Comprehensive coverage of the skill's actions (routing, gap assessment, breach response, market entry, cross-mapping) matches the 5-anchor; it is not the 4-anchor because there are no meaningful coverage gaps.

Completeness

Explicitly answers both questions: the 'what' is 'a compliance router that first determines WHICH Saudi regulations apply… then guides framework-specific compliance', and the 'when' is given twice with concrete triggers — 'Use for any Saudi Arabia / KSA compliance question' and 'Trigger for any KSA, Riyadh, Vision 2030 compliance, NCA, SDAIA, SAMA, or Saudi data protection question even if no framework is named'. This is the 5-anchor verbatim in structure, not the 4-anchor where the 'when' is merely present.

Trigger Term Quality

Comprehensive natural-term coverage including synonyms: 'Saudi Arabia / KSA', 'Riyadh', 'Vision 2030 compliance', 'NCA, SDAIA, SAMA', the Arabic law name '(نظام حماية البيانات الشخصية)', 'PDPL breach notification and data transfers', 'cloud data residency in the Kingdom', 'CST CSP registration', and a quoted user phrasing ('expanding to Saudi Arabia'). These are exactly the phrases a user with this need would say, matching the 5-anchor.

Distinctiveness Conflict Risk

The description is tightly scoped to a clear niche — Saudi Arabia / KSA regulatory compliance with named instruments (NCA ECC-2:2024, PDPL, SAMA CSF, CST framework) — so it would not trigger for generic privacy, GRC, or other-jurisdiction questions. It matches the 5-anchor ('clear niche with distinct triggers; minimal conflict risk'); the only conceivable overlap is a hypothetical other-jurisdiction compliance skill, which the geographic scoping fully disambiguates.