Skip to content
cccskills
FreePublished on GitHub

Security & Privacy Design Review

Review data retention, deletion, backup residency, and cross-border data transfer.

The English summary is being prepared. Showing the original description.

Run score Not tested

See how to install

Files included (9)

  • SKILL.md1.8 KB
  • eval/promptfoo.yaml1.2 KB
  • fixtures/01-missing-retention.md2.3 KB
  • fixtures/02-well-designed.md4.6 KB
  • golden/01-missing-retention.md2.7 KB
  • golden/02-well-designed.md1.2 KB
  • prompt/system.md6.6 KB
  • prompt/user.md3.9 KB
  • README.md4.6 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Pattern declaration

Primary pattern: Reviewer Secondary patterns: Inversion Why: プライバシー設計レビューはチェックリスト型評価が主だが、データ関連の設計変更がない差分では実行を止めるゲートが必要

Guidance

  • Check retention/deletion policies, including backups, residency, and cross-border handling.
  • Ensure privacy rights flows (erasure/export) and audit logging are defined with access controls.
  • Verify encryption and access control strategy for data at rest/in transit.
  • Call out missing threat/abuse considerations for sensitive data paths.

Non-goals

  • 実装詳細や規約の推測だけで断定しない。

Pre-execution Gate / 実行前ゲート

このスキルは以下の条件がすべて満たされない限りNO_REVIEWを返す。

  • 差分にデータ保持・削除・暗号化・プライバシーに関連する設計ドキュメント変更が含まれている
  • 差分が非データ領域のみの変更ではない
  • inputContextにfullFileが含まれている

ゲート不成立時の出力: NO_REVIEW: security-privacy-design — プライバシー・データ設計に関連する変更が検出されない

False-positive guards

  • 別文書で保持/削除/暗号化ポリシーがすでに明示されている場合は黙る。

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

<What this skill does>

The English summary is being prepared. Showing the original description.

s977043/river-review7Updated Oct 24, 2026

画像・ボタン・フォーム要素に適切なアクセシブルネームがあるか確認する。

The English summary is being prepared. Showing the original description.

s977043/river-review7Updated Oct 24, 2026

Ensure ADRs capture context, decision, alternatives, tradeoffs, and follow-ups in a way that prevents future drift.

The English summary is being prepared. Showing the original description.

s977043/river-review7Updated Oct 24, 2026

敵対的分析手法を統合したレビューの entry skill。認知バイアス対策の3手法 (Pre-mortem / War Game / Logic Torturing)と、宣言・主張と実態の乖離を突く claim-vs-actual 検出3パターン(Self-Contradiction / Refactor-Claim Audit / Cross-File Leakage)へルーティングし、通常のレビューでは見えない設計の盲点・ 防御の穴・論理の弱点・宣言と実装のズレを可視化する。

The English summary is being prepared. Showing the original description.

s977043/river-review7Updated Oct 24, 2026

Review changes to the Agent Skills import/export bridge for path safety, round-trip fidelity, and validation correctness.

The English summary is being prepared. Showing the original description.

s977043/river-review7Updated Oct 24, 2026

Checks whether AI-assisted work defines review criteria, accessible context, explicit review loop, human judgment boundary, and feedback capture before delegating to an agent.

The English summary is being prepared. Showing the original description.

s977043/river-review7Updated Oct 24, 2026

See all skills by s977043

Report a problem with this skill