All authors
Claude Skills by ThomasMoreAI
github.com/ThomasMoreAI3,571 skills4 installs3,388 views
- Legal DocsGenerate jurisdiction-aware Privacy Policies and Terms & Conditions for SaaS products, apps, and digital services. Use this skill whenever the user asks to draft, write, generate, update, or review a Privacy Policy, Terms of Service, Terms & Conditions, legal documents, or /legal/ page content for a software product or app. Trigger even if the user just says "I need a privacy policy", "write my T&C", "help with legal docs", "draft my terms", or "what should my privacy policy say" for their ap...Votes: 0GitHub stars: 16
- Legal Privacy ReviewDPA, 개인정보 처리 활동, DSAR, PIA/DPIA, privacy policy 변경을 검토합니다. 사용자가 제공한 정책/문서/처리 설명을 기준으로 개인정보 리스크와 확인 질문, 초안 산출물을 만들 때 사용합니다.Votes: 0GitHub stars: 16
- Legit Interest Vs ConsentDecision framework for choosing between consent and legitimate interest as the lawful basis for processing. Covers power imbalance indicators, conditionality prohibition under Article 7(4), granularity requirements, the three-part LIA test (purpose, necessity, balancing), and practical decision trees for common scenarios.Votes: 0GitHub stars: 16
- Legitimate Interest LiaGuides the three-part Legitimate Interest Assessment (LIA) required under GDPR Article 6(1)(f): purpose test, necessity test, and balancing test. Activate when evaluating legitimate interest as a lawful basis, conducting LIA reviews, or documenting proportionality analysis. Keywords: LIA, legitimate interest, balancing test, necessity test, purpose test, Article 6(1)(f).Votes: 0GitHub stars: 16
- Managing Consent For ResearchGuide for managing consent for scientific research under GDPR Article 89 and Recital 33 broad consent provisions. Covers ethical review board coordination, purpose evolution management, appropriate safeguards including pseudonymization, and the interplay between consent and other lawful bases for research processing.Votes: 0GitHub stars: 16
- Marketing Analytics DpiaGuides DPIA for marketing profiling, behavioural targeting, cross-device tracking, and advertising analytics. Covers ePrivacy Directive Art. 5(3) cookie consent, PECR regulations, legitimate interest balancing for direct marketing, and adtech processing chain assessment. Keywords: marketing analytics, DPIA, profiling, behavioural targeting, cross-device tracking, ePrivacy, PECR, adtech, legitimate interest.Votes: 0GitHub stars: 16
- Nist Pf IdentifyImplement the NIST Privacy Framework IDENTIFY function including ID.BE business environment, ID.DA data actions, ID.IM improvement, and ID.RA risk assessment subcategories. Provides control mapping, gap analysis templates, and implementation workflows for privacy risk identification.Votes: 0GitHub stars: 16
- Personal Data TestClassifies personal vs non-personal data per GDPR Art. 4(1) definition test with decision tree for borderline cases. References Breyer v Germany CJEU C-582/14 dynamic IP ruling and WP29 Opinion 4/2007. Keywords: personal data, GDPR Art 4, data classification, Breyer ruling, identifiability test, PII.Votes: 0GitHub stars: 16
- Pia Generation StubbiGenerate a Privacy Impact Assessment in house format for a new feature, product, or processing activity, using the structure learned from your seed PIA.Votes: 0GitHub stars: 16
- Pia GenerationGenerate a Privacy Impact Assessment in house format for a new feature, product, or processing activity, using the structure learned from your seed PIA. Use when the user says "write a PIA", "privacy impact assessment for", "do we need a PIA for this", "privacy review this feature", or describes a new data processing activity.Votes: 0GitHub stars: 16
- Pia Large Scale MonitorConducts Privacy Impact Assessment for large-scale systematic monitoring under GDPR Article 35(3)(c). Covers CCTV and video surveillance, employee monitoring, location tracking, internet monitoring, and behavioural analytics. Applies EDPB WP248rev.01 criteria for systematic monitoring of publicly accessible areas. Keywords: DPIA, large-scale monitoring, CCTV, employee monitoring, systematic monitoring, surveillance, location tracking.Votes: 0GitHub stars: 16
- Pia Review CadenceGuides the periodic DPIA review lifecycle including trigger identification for regulatory changes, new data categories, technology changes, and breach incidents. Covers version control, stakeholder sign-off procedures, and DPIA register management per Art. 35(11). Keywords: DPIA review, PIA update, review cadence, version control, Art. 35(11), periodic review, trigger events, stakeholder sign-off.Votes: 0GitHub stars: 16
- Policy Monitor AnthropicsKeep the privacy policy current with practice. Two modes: weekly sweep of saved PIAs, DPA reviews, and triage results to find policy drift; or direct query for a proposed new practice. Use when the user asks "does our policy cover this", "we want to start doing X — does the policy need updating", "run the policy monitor", "policy sweep", or wants to find where the privacy policy no longer matches what the team actually does.Votes: 0GitHub stars: 16
- Policy Redraft ZekaisuniPolicy-diff veya gaps sonucunda bulunan boşluğu kapatmak için Türkçe/İngilizce iç politika üzerinde öneri redraft üretir. Kaynak politika dosyasını değiştirmez; ayrı bir öneri memo'su yazar.Votes: 0GitHub stars: 16
- Privacy CheckUse to assess Privacy by Design compliance and GDPR/data protection alignment for a feature or system.Votes: 0GitHub stars: 16
- Privacy Law Gap AnalysisGuides conducting privacy law gap analysis for market entry into new jurisdictions. Covers target jurisdiction assessment, existing compliance mapping, remediation effort estimation, and implementation timeline planning. Keywords: gap analysis, market entry, jurisdiction assessment, remediation planning, compliance mapping.Votes: 0GitHub stars: 16
- Privacy Page GeneratorWhen the user wants to create, optimize, or structure Privacy Policy page. Also use when the user mentions "privacy policy," "privacy page," "data protection," "GDPR compliance," "privacy notice," "data privacy," "CCPA," "cookie policy," or "personal data." For legal overview page, use legal-page-generator.Votes: 0GitHub stars: 16
- Privacy Policy Lucas Flatwhite데이터 유형, 관할권, GDPR 및 컴플라이언스 고려사항, 법률 검토가 필요한 조항을 다루는 상세한 개인정보처리방침을 초안 작성합니다. 개인정보처리방침 작성, 데이터 보호 문서 업데이트, 또는 컴플라이언스 준비 시 사용하세요.Votes: 0GitHub stars: 16
- Privacy Policy PaperclipaiDraft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal reviewVotes: 0GitHub stars: 16
- Privacy Policy PhurynDraft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review. Use when creating a privacy policy, updating data protection documentation, or preparing for compliance.Votes: 0GitHub stars: 16
- Privacy Policy ReviewerReview a privacy policy or terms of service against a structured scorecard, combining TOSDR's human-curated ratings with LLM analysis. Use when a user wants to review, analyze, or understand a privacy policy or terms of service before signing up for a service or after receiving a policy update notification.Votes: 0GitHub stars: 16
- PrivacyPrivacy and data protection - GDPR, CCPA, consent. Use when handling user data.Votes: 0GitHub stars: 16
- Pseudo Vs Anon DataClassifies data as pseudonymised or anonymised using Recital 26 reasonably likely test, Breyer ruling C-582/14, motivated intruder test, and WP29 Opinion 05/2014 on anonymisation techniques. Covers singling out, linkability, and inference tests. Keywords: pseudonymisation, anonymisation, Recital 26, re-identification, k-anonymity, differential privacy, WP29 Opinion 05/2014.Votes: 0GitHub stars: 16
- Recovery App Legal TermsGenerate legally-sound terms of service, privacy policies, and medical disclaimers for recovery and wellness applications. Expert in HIPAA, GDPR, CCPA compliance. Activate on 'terms of service', 'privacy policy', 'legal terms', 'medical disclaimer', 'HIPAA', 'user agreement'. NOT for contract negotiation (use attorney), app development (use domain skills), or moderation (use recovery-community-moderator).Votes: 0GitHub stars: 16
- Reg Gap Analysis AnthropicsDiff a new or changed regulation against current privacy policy and practice — outputs a gap list and a remediation plan with owners and dates. Use when a new reg drops, the user asks "does [regulation] affect us", "gap analysis for [state privacy law]", "compliance check against [reg]", or pastes regulatory text.Votes: 0GitHub stars: 16
- Restriction Of ProcessingHandles GDPR Article 18 right to restriction of processing requests, covering the four grounds for restriction (accuracy contest, unlawful processing, erasure opposition, legitimate interest pending), technical flagging mechanisms, and lifting procedures. Activate for restriction request, Art. 18, processing freeze queries.Votes: 0GitHub stars: 16
- Retention Exception MgmtManages retention exception workflows including request-approval processes, duration limits, periodic review cycles, documentation requirements, and audit trail maintenance. Covers legitimate grounds for extending retention beyond scheduled periods and governance controls to prevent indefinite data hoarding. Activate for retention exception, retention extension, data hoarding prevention, retention override queries.Votes: 0GitHub stars: 16
- Right To ErasureImplements the GDPR Article 17 right to erasure (right to be forgotten) workflow, covering all six grounds for erasure, five exceptions, technical deletion versus anonymization decisions, and third-party notification under Article 19. Activate for erasure request, deletion request, right to be forgotten, Art. 17 queries.Votes: 0GitHub stars: 16
- Right To ObjectHandles GDPR Article 21 right to object to processing, including compelling legitimate grounds assessment, ceasing processing obligations, documentation requirements, and the relationship with erasure under Article 17(1)(c). Activate for right to object, Art. 21, objection to processing, legitimate interest queries.Votes: 0GitHub stars: 16
- Right To RectificationProcesses GDPR Article 16 right to rectification requests, covering verification of corrected data accuracy, notification to recipients under Article 19, timeline management, and completion of incomplete data. Activate for rectification, correction request, inaccurate data, Art. 16, data correction queries.Votes: 0GitHub stars: 16
- Ropa Maintenance WorkflowEstablishes ongoing RoPA maintenance processes including update triggers, change management integration, version control, stakeholder review cycles, and completeness verification procedures. Activate for RoPA updates, record maintenance, change management, version history, review scheduling.Votes: 0GitHub stars: 16
- Ropa Tool IntegrationIntegrates Records of Processing Activities with privacy management platforms including OneTrust, TrustArc, Collibra, and DataGrail. Covers API-based synchronization, data mapping import, and automated RoPA population from enterprise tools. Activate for RoPA tool setup, OneTrust integration, TrustArc sync, privacy platform configuration.Votes: 0GitHub stars: 16
- Search Engine ErasureImplements the right to be forgotten in search engines under GDPR Article 17 and the CJEU Google Spain ruling (C-131/12). Covers delisting request procedures, criteria assessment balancing privacy against public interest, and geographic scope determination. Activate for right to be forgotten, search delisting, Google Spain, de-indexing queries.Votes: 0GitHub stars: 16
- Slovak To English Gdpr TranslationTranslates legal articles from Slovak to English with strict terminology mappings for GDPR terms ('prevádzkovateľ' to 'Controller', 'sprostredkovateľ' to 'processor'), maintaining text structure and grammatical accuracy.Votes: 0GitHub stars: 16
- Special Category DataIdentifies and classifies GDPR Art. 9 special category data including racial origin, political opinions, religious beliefs, trade union membership, genetic, biometric, health, and sexual orientation data. Covers processing conditions under Art. 9(2)(a)-(j). Keywords: special category, Art 9, sensitive data, biometric, genetic, health data, explicit consent.Votes: 0GitHub stars: 16
- Sub Processor ManagementGDPR Article 28(2) sub-processor approval workflow management. Covers prior specific and general authorization mechanisms, change notification procedures, objection windows, flow-down obligation enforcement, and sub-processor chain risk monitoring.Votes: 0GitHub stars: 16
- Supplementary MeasuresGuides implementation of technical, contractual, and organisational supplementary measures for international data transfers per EDPB Recommendations 01/2020. Covers encryption, pseudonymisation, split processing, audit rights, transparency obligations, and internal policies. Keywords: supplementary measures, encryption, pseudonymisation, EDPB recommendations, transfer safeguards.Votes: 0GitHub stars: 16
- Terms AnalyzerAnalyze terms of service and privacy policies to identify concerning clauses, hidden permissions, and user rights implicationsVotes: 0GitHub stars: 16
- Terms ReconSurvey existing privacy and legal docs for completeness and GDPR compliance.Votes: 0GitHub stars: 16
- Transfer Impact AssessmentGuides the post-Schrems II Transfer Impact Assessment process following EDPB Recommendations 01/2020 six-step methodology. Covers destination country surveillance law assessment, European Essential Guarantees evaluation, and supplementary measures determination. Keywords: TIA, transfer impact assessment, Schrems II, EDPB recommendations, supplementary measures.Votes: 0GitHub stars: 16
- Transparent CommunicationImplements GDPR Article 12 transparent information and communication requirements, covering concise, intelligible, and plain language obligations, response timelines, fee and refusal provisions, and layered notice design. Activate for transparent communication, Art. 12, privacy notice, plain language, response timeline queries.Votes: 0GitHub stars: 16
- Use Case TriageQuickly determine whether a processing activity needs a PIA, a mandatory GDPR DPIA, or can proceed — surfaces privacy policy conflicts and routes to the right next step. Use when the user asks "does this need a PIA", "triage this feature", "privacy check on X", "is this okay from a privacy perspective", or describes a new data processing activity, product feature, or vendor relationship.Votes: 0GitHub stars: 16
- Vendor Ai Review AnthropicsReview vendor AI terms — agreement, addendum, or ToS AI provisions — against your governance positions; flag training-on-data, liability, model changes, and AI policy consistency. Use when user says "review this AI agreement", "check OpenAI terms", "what did we agree to with [vendor]", "vendor sent an AI addendum", "is this AI contract okay", or attaches vendor AI terms.Votes: 0GitHub stars: 16
- Vendor Privacy AuditOn-site and remote vendor audit procedures per GDPR Article 28(3)(h). Covers audit planning, evidence collection methodologies, finding classification, remediation tracking, and audit report generation for processor compliance verification.Votes: 0GitHub stars: 16
- Vendor Privacy Due DiligencePre-contract vendor privacy due diligence per GDPR Article 28(1). Covers risk questionnaires, technical controls assessment, certification review, data flow analysis, and documented sufficiency decisions for processor engagement.Votes: 0GitHub stars: 16
- Vendor Security AssessmentDrafts a Vendor Security Assessment Questionnaire evaluating third-party cybersecurity posture, data handling, and regulatory compliance. Vendor responses become binding contractual representations with executive certification. Use during vendor due diligence, third-party risk management, procurement security review, or subprocessor evaluation.Votes: 0GitHub stars: 16
- Auto DocThư ký Pháp lý AI. Tự động trích xuất 8 trường thông tin để tạo hợp đồng lao động (.docx) phân loại theo phòng ban và tự động gửi email đính kèm file.Votes: 0GitHub stars: 16
- Background Check SummarySummarizes raw background check data into structured executive reports with risk categorization (GREEN/YELLOW/RED). Use when processing criminal records, court filings, employment/education verification, sanctions screening, or adverse media for pre-employment screening, executive due diligence, or investment-grade investigations.Votes: 0GitHub stars: 16
- Customize 6Guided customization of your employment practice profile — change one thing without re-running the whole cold-start interview. Adjust jurisdictional footprint, risk posture, escalation contacts, hiring review rules, termination review rules, handbook positions, investigation preferences, or matter workspace paths. Use when the user says "change my [thing]", "add a jurisdiction", "update my profile", "edit my config", or "customize".Votes: 0GitHub stars: 16
- Employment Contract Templates 2Employment Contract Templates workflow skill. Use this skill when the user needs Templates and patterns for creating legally sound employment documentation including contracts, offer letters, and HR policies and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.Votes: 0GitHub stars: 16