CtrlK
BlogDocsLog inGet started
Tessl Logo

privacy-policy

Use when reviewing whether a website has a visible, accessible privacy policy link, particularly in the footer navigation.

61

Quality

72%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/privacy-policy/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, appropriately disclosed overview that points cleanly to a real one-level-deep reference file, with concrete check and fix instructions. The main weakness is redundancy within the short body — Quick Reference bullets and the intro duplicate the Check section and the reference file — plus a vague, boilerplate Code Review paragraph.

Suggestions

Remove the Quick Reference bullets that restate the Check and Fix sections (retention periods and analytics/logging/monitoring disclosure appear twice) to eliminate intra-file duplication.

Cut or make concrete the generic Code Review paragraph ("Review server config, headers, forms, and integration points related to Link to your privacy policy in the footer. Flag exact responses, cookies, or browser behaviors...") — it adds no specific instruction; move anything actionable into references/rule.md.

Drop the opening sentence "Collecting user data without a publicly accessible privacy policy violates GDPR (EU), CCPA (California), PIPEDA (Canada)..." since it is repeated verbatim in references/rule.md, keeping only the pointer.

DimensionReasoningScore

Conciseness

The body is mostly efficient but has noticeable redundancy: Quick Reference bullets restate the Check section almost verbatim ("Disclose retention periods and whether analytics, logs, or monitoring receive personal data" vs "Confirm the policy discloses retention periods and whether analytics, logging, or monitoring vendors receive user data"), and the opening GDPR sentence is duplicated in references/rule.md. This is more than the 'minor instances' of anchor 4, but there is no padding or explanation of concepts Claude already knows, so it stays above anchor 2.

3 / 5

Actionability

Check and Fix give concrete, executable instruction ("Check whether the website footer contains a link to a privacy policy page. Verify the linked page contains an actual privacy policy with contact information..."; "Add a 'Privacy Policy' link to the site footer that appears on every page"). Per the rubric's instruction-only note, absence of code is not penalized, but the generic Code Review paragraph ("Review server config, headers, forms, and integration points related to...") is vague boilerplate, keeping it below anchor 5.

4 / 5

Workflow Clarity

The Check → Fix → Explain → Code Review sequence is clearly sectioned, and the Check section acts as an explicit verification step (link present on all pages, policy content, retention disclosures). It is below anchor 5 because the ordering and interplay of the four sections is implicit (when Explain vs Code Review applies is unstated) and there is no feedback-loop guidance for a failed check; it is above anchor 3 because the sequence is unambiguous and the verification criteria are explicit.

4 / 5

Progressive Disclosure

The body is a proper overview with a clearly signaled, one-level-deep pointer — "For full implementation details, code examples, and framework-specific guidance, see `references/rule.md`" — and the referenced file exists and contains exactly that (code examples, framework guidance, GDPR Article 13 requirements table). No inlined content belongs in a separate file, so navigation is easy.

5 / 5

Total

16

/

20

Passed

Description

73%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, distinct, and has a natural trigger phrase, but it is effectively a single merged when-clause: it communicates only the review action and omits the skill's fix/explain/code-review scope and common synonyms like GDPR or compliance. Solid but with room to be more comprehensive.

Suggestions

Add one or two more concrete capability actions (e.g., "Checks footer links and required policy content, and provides fix guidance for GDPR/CCPA compliance") so the description reflects the skill's full scope rather than only the review trigger.

Include trigger synonyms such as "GDPR", "CCPA", "privacy notice", or "legal links" so users searching those terms naturally surface the skill.

DimensionReasoningScore

Specificity

The description names the domain ("website has a visible, accessible privacy policy link, particularly in the footer navigation") and one concrete action — reviewing presence/visibility of the link — but does not cover the fix, explain, or code-review capabilities the body provides, so it is not comprehensive. It is above anchor 2 because the action is concrete and precisely located, not generic.

3 / 5

Completeness

Both parts are present: the "what" is embedded in "reviewing whether a website has a visible, accessible privacy policy link" and an explicit "Use when..." trigger clause opens the description. It is not anchor 5 because the "when" is circular with the "what" rather than offering distinct concrete trigger scenarios, and not anchor 3 because a clear what and an explicit trigger are both stated.

4 / 5

Trigger Term Quality

Natural phrases users would say are present ("privacy policy", "footer", "website", "link"), giving good keyword coverage. It falls short of anchor 5 because common variations and synonyms are missing (e.g., "GDPR", "compliance", "privacy notice", "legal links").

4 / 5

Distinctiveness Conflict Risk

"Privacy policy link... in the footer navigation" is a clear niche with distinct triggers and minimal overlap risk; a query about cookie banners or other frontend rules would not naturally match this description.

5 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
thedaviddias/Front-End-Checklist
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.