CtrlK
BlogDocsLog inGet started
Tessl Logo

gdpr-data-handling

Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls.

48

Quality

51%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/gdpr-data-handling/SKILL.md

The canonical home for this skill is gdpr-data-handling in rmyndharis/antigravity-skills

SKILL.md
Quality
Evals
Security

Quality

Content

43%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is token-efficient and well-structured with a clear Use/Do-not-use framing, but it is almost entirely generic boilerplate with no actionable guidance, and its single reference points to a missing file.

Suggestions

Add concrete, executable guidance for the core tasks (e.g., a minimal consent-capture snippet, a DSR fulfillment checklist, or specific verification commands) instead of generic 'apply best practices' bullets.

Create the referenced 'resources/implementation-playbook.md' (or correct the path) so the progressive-disclosure reference resolves to a real file.

Turn the 'Instructions' list into a real sequenced workflow with explicit validation/verification checkpoints, especially for batch or destructive operations like data deletion on DSR requests.

DimensionReasoningScore

Conciseness

The body is lean and does not explain concepts Claude already knows (no 'what is GDPR' padding), though it redundantly repeats the frontmatter description verbatim and the generic 'Instructions' bullets add little.

4 / 5

Actionability

Guidance is high-level and abstract ('Apply relevant best practices and validate outcomes', 'Provide actionable steps and verification') with no concrete code, commands, or specific steps beyond 'open the playbook'.

2 / 5

Workflow Clarity

The 'Instructions' section offers only a rough, generic sequence (clarify → apply → provide → open playbook) with no defined checkpoints or validation steps for the operations it covers.

2 / 5

Progressive Disclosure

Sections are well organized and the reference is clearly signaled one level deep, but the referenced file 'resources/implementation-playbook.md' does not exist in the bundle, so navigation is undermined.

3 / 5

Total

11

/

20

Passed

Description

60%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description names a distinct GDPR niche with decent natural trigger terms, but it is more of a domain label than an action list and lacks an explicit 'Use when...' clause, capping completeness.

Suggestions

Add an explicit 'Use when...' trigger clause (e.g., 'Use when building systems that process EU personal data, managing consent, or handling data subject requests').

Replace the generic 'implementation guide for' framing with concrete verbs (e.g., 'Implement consent capture, fulfill data subject requests, and audit data flows for GDPR compliance').

Include common synonyms/acronyms users say (DSAR, data subject access requests, PII, data protection by design).

DimensionReasoningScore

Specificity

The phrase 'implementation guide for GDPR-compliant data processing, consent management, and privacy controls' names the domain and sub-domains but offers only the generic action 'implementation guide' rather than concrete actions like 'extract', 'manage', or 'audit'.

2 / 5

Completeness

It clearly states what the skill does ('implementation guide for GDPR-compliant data processing, consent management, and privacy controls') but provides no 'Use when...' trigger clause, so completeness is capped at 3 per the rubric guidelines.

3 / 5

Trigger Term Quality

Includes natural keywords a user would say ('GDPR', 'consent management', 'privacy controls'), but misses common synonyms and acronyms users also use ('DSAR', 'data subject requests', 'PII', 'data protection').

4 / 5

Distinctiveness Conflict Risk

The GDPR-specific framing ('GDPR-compliant', 'consent management', 'privacy controls') carves out a clear niche with distinct triggers and minimal overlap risk with other skills.

5 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.