CtrlK
BlogDocsLog inGet started
Tessl Logo

gdpr-data-handling

Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews.

62

Quality

72%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/hr-legal-compliance/skills/gdpr-data-handling/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Well-organized overview with excellent progressive disclosure, but the body itself leans on reference material and decorative diagrams rather than executable guidance or validated workflows. Pulling a minimal worked example and a validation checkpoint into the body would lift the lower dimensions.

Suggestions

Replace the ASCII-art legal-basis/rights trees with compact tables or move them to references/details.md to cut decorative tokens.

Add one short copy-paste-ready code example (e.g. consent record or DSAR submit) inline so the body is actionable without requiring the reference file.

Add an explicit DSR workflow with verification checkpoints (submit -> verify identity -> process -> validate result -> respond within 30 days) to satisfy the destructive-operation feedback-loop requirement.

DimensionReasoningScore

Conciseness

Mostly efficient, but the ASCII-art trees for legal bases and data-subject rights add tokens that restate GDPR knowledge Claude already has rather than delivering actionable guidance.

3 / 5

Actionability

The body is descriptive reference (categories, rights, do's/don'ts) with all executable code deferred to references/details.md, so the SKILL.md itself lacks copy-paste-ready instruction.

3 / 5

Workflow Clarity

Processes like DSAR handling and erasure are destructive but presented only as deadlines and lists with no sequenced validate->fix->retry checkpoints, capping this dimension per the feedback-loop rule.

3 / 5

Progressive Disclosure

Clear overview with a single well-signaled one-level-deep reference to references/details.md (which exists), with explicit guidance on when to read it.

5 / 5

Total

14

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-structured description that answers both what and when with concrete triggers and a clear niche. Minor gaps in trigger-term synonym coverage and action specificity keep it just below a perfect score on two dimensions.

DimensionReasoningScore

Specificity

Names the domain and several concrete actions ('consent management, data subject rights, and privacy by design') but stops short of the full comprehensive action list needed for a 5.

4 / 5

Completeness

Clearly states what the skill does and follows with an explicit 'Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews' trigger clause.

5 / 5

Trigger Term Quality

Good natural coverage ('GDPR compliance reviews', 'privacy controls', 'EU personal data') but omits common synonyms users would say such as 'DSAR', 'data subject requests', or 'consent'.

4 / 5

Distinctiveness Conflict Risk

Occupies a clear GDPR/privacy niche with distinct triggers unlikely to collide with other skills.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
wshobson/agents
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.