gdpr-dsgvo-expert
GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests. Use for GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, and data subject rights management.
94
86%
Does it follow best practices?
Impact
99%
1.28xAverage score across 6 eval scenarios
Passed
No known issues
Quality
Discovery
100%Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.
This is a strong skill description that clearly defines its domain (GDPR/DSGVO compliance), lists specific concrete actions, and provides explicit trigger guidance via the 'Use for...' clause. The inclusion of both GDPR and DSGVO terminology broadens discoverability, and the specific capabilities like DPIA generation and data subject rights tracking make it highly distinctive.
| Dimension | Reasoning | Score |
|---|---|---|
Specificity | Lists multiple specific concrete actions: 'Scans codebases for privacy risks', 'generates DPIA documentation', 'tracks data subject rights requests'. These are clear, actionable capabilities. | 3 / 3 |
Completeness | Clearly answers both 'what' (scans codebases, generates DPIA docs, tracks data subject rights requests) and 'when' with an explicit 'Use for...' clause listing specific trigger scenarios like compliance assessments, privacy audits, and DPIA generation. | 3 / 3 |
Trigger Term Quality | Includes strong natural keywords users would say: 'GDPR', 'DSGVO', 'privacy', 'DPIA', 'data subject rights', 'compliance', 'privacy audits', 'data protection'. Good coverage of both English and German terminology. | 3 / 3 |
Distinctiveness Conflict Risk | Highly distinctive niche combining GDPR/DSGVO compliance, DPIA documentation, and data subject rights tracking. Unlikely to conflict with other skills due to the very specific regulatory domain and German law reference. | 3 / 3 |
Total | 12 / 12 Passed |
Implementation
72%Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
This is a well-structured skill with strong actionability — concrete CLI commands and clear tool documentation. Its main weaknesses are the inclusion of GDPR concept explanations that Claude already knows (inflating token usage) and the lack of validation checkpoints in workflows that deal with compliance-critical processes. The progressive disclosure and reference organization are excellent.
Suggestions
Remove or drastically reduce the 'Key GDPR Concepts' section — Claude already knows GDPR legal bases, special category data definitions, and data subject rights. This saves ~60 lines of tokens.
Add validation checkpoints to workflows: e.g., in Workflow 1, verify critical issues are resolved before proceeding ('Re-run checker → confirm score above threshold'); in Workflow 2, add deadline monitoring checks and identity verification failure handling.
Add a feedback loop to Workflow 2 for when the 30-day deadline is approaching (e.g., 'If day 25+ and not completed → escalate and consider requesting extension per Art. 12(3)').
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The skill includes a 'Key GDPR Concepts' section that explains legal bases, special category data, and data subject rights — concepts Claude already knows well. The tools and workflows sections are efficient, but the reference material at the bottom adds ~60 lines of content that doesn't teach Claude anything new and could be omitted or left to the reference files. | 2 / 3 |
Actionability | All three tools have concrete, copy-paste-ready CLI commands with flags and arguments. The workflows provide specific command sequences for each step. The guidance is executable rather than abstract. | 3 / 3 |
Workflow Clarity | Three workflows are clearly sequenced with numbered steps and specific commands. However, none include validation checkpoints or feedback loops — e.g., Workflow 1 doesn't verify that critical issues are actually resolved before proceeding to DPIA, and Workflow 2 doesn't handle the case where identity verification fails or the deadline is approaching. For compliance-critical operations, this lack of validation/error recovery is a gap. | 2 / 3 |
Progressive Disclosure | The skill has a clear table of contents, well-organized sections for tools/references/workflows, and appropriately points to separate reference files (gdpr_compliance_guide.md, german_bdsg_requirements.md, dpia_methodology.md) with brief summaries of what each contains. References are one level deep and clearly signaled. | 3 / 3 |
Total | 10 / 12 Passed |
Validation
100%Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.
Validation — 11 / 11 Passed
Validation for skill structure
No warnings or errors.
- Repository
- alirezarezvani/claude-skills
- Commit
f567c61
- Reviewed
Table of Contents
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.