Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

legalby lawve-ai

Privacy Policy Generator

lawve-ai/privacy-policy-stephane-boghossian

Source lawve-ai/awesome-legal-skills ↗License NOASSERTION

A zero-hallucination privacy-policy generator that takes anyone — non-lawyer founder to lawyer — from a guided intake to a publishable, jurisdiction-aware privacy policy. Jurisdiction-first: it detects which laws apply from where your users are, then drafts only the required clauses — GDPR/EU + UK, US (CCPA/CPRA, ~20 state laws, COPPA, sector overlays), and global/MENA (LGPD, Quebec Law 25, India DPDP, China PIPL, UAE/DIFC, Saudi PDPL), plus app-store, cookies, and AI/EU AI Act disclosures. Its

SkillScore68Maintained

Automatic

Legal & Contracts pack

Last verified 8/16/2026

What it changes

Passed 15 of 22 test cases with the skill, and 7 of 22 without it.

Without skill32%

With skill68%

Checks it passed that the model alone missed

The intake process flags child data collection as a high-risk activity.
The table uses functional descriptors rather than hallucinated retention day limits.
The response includes a high-risk banner requiring legal review for AI training practices.

and 7 more in the full report

8 fixed7 passed either way7 still failing0 broke

Pass-rate lift: +36 pp
Tokens: +94%
Agent turns: 0%
Response time: +26%

Model gemini-3.6-flashMeasured 8/16/2026v115 of 22 cases passed with skill

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/lawve-ai-privacy-policy-stephane-boghossian/SKILL.md https://app.decimal.ai/s/lawve-ai-privacy-policy-stephane-boghossian/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add lawve-ai-privacy-policy-stephane-boghossian, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/lawve-ai-privacy-policy-stephane-boghossian/ and pins it in .decimal/skills.lock

decimalai skills add lawve-ai-privacy-policy-stephane-boghossian

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/lawve-ai-privacy-policy-stephane-boghossian/SKILL.md https://app.decimal.ai/s/lawve-ai-privacy-policy-stephane-boghossian/SKILL.md

Raw file: /s/lawve-ai-privacy-policy-stephane-boghossian/SKILL.md ↗ · machine-readable summary at /s/lawve-ai-privacy-policy-stephane-boghossian.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 8

Prompt

Create a California-specific privacy rights section for an e-commerce site where users have confirmed that the business sells targeted advertising data.

What was checked, without and with the skill
Checked	Without skill	With skill
The California section includes an explicit Do Not Sell or Share My Personal Information disclosure link requirement.	Passed	Passed
The draft includes a Limit the Use of My Sensitive Personal Information notice requirement.	Missed	Passed

case-11 · gemini-3.6-flash · 8/16/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md98 lines10 files

Privacy Policy Generator

Generate a bulletproof, jurisdiction-aware privacy policy for any business or product, usable by a non-lawyer founder and trusted by a lawyer. The whole point of this skill is correctness without hallucination: a fabricated statutory citation or a clause that doesn't match the user's real practices is worse than no policy at all.

⚖️ The prime directive (read this first, never break it)

State ONLY what the user confirms they actually do. A privacy policy is a set of enforceable representations (FTC §5; see the OkCupid/Match 2026 and Gateway Learning cases in the reference pack). Saying more than is true is the #1 legal failure. Never default-in a flattering or risk-adding clause.
Never invent law. Do not generate a statute/section number, a fine amount, an effective date, or a "the law requires X" claim unless it traces to the bundled reference pack (references/) or a live legal-data-hunter lookup. If you're unsure of a specific, name the law in plain terms ("California's CCPA/CPRA," "the EU GDPR") and describe the right functionally — or omit it. Uncertain → omit or mark [VERIFY], never guess.
Confirm-don't-assume. A clause renders only if a confirming intake answer exists. Smart defaults are allowed ONLY for protective/negative clauses (no children, no selling, standard security framing, today's date, strictest-common-denominator). Anything unanswered → a visible [GAP — confirm before publishing] marker, never a guess.
This is not legal advice. Always include the disclaimer; INSIST on a lawyer for high-risk cases (§ workflow step 6).

Workflow

Step 1 — Pick the mode

Ask (or infer): QUICK (non-lawyer: only the must-ask questions, batched, smart defaults pre-filled, ~10 answers) or EXPERT (lawyer/thorough: full questions, clause-level control, citations, full reconciliation). → Read references/intake-questionnaire.md for both flows.

Step 2 — Compute the applicable-law set FIRST (jurisdiction-first)

Ask intake Groups 0–2 (product type → business identity → where users are located). Location is the law-selector. If "international / unknown," apply the strictest-common-denominator (GDPR + CCPA + COPPA). This ordering is what prevents generic boilerplate.

Step 3 — Gather practices (only the questions the selected laws require)

Work Groups 3–17 of references/intake-questionnaire.md. Batch questions; offer the smart default so the user can accept with "yes." Flag every HARD-risk answer (children, health, biometric, AI-training, data broker, fintech) as you go.

Track record

Benchmark

15 / 22

test cases passed, vs 7 / 22 without

Adoption

Users: 3
Times used: 107

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

lawve-ai / awesome-legal-skills

skills/privacy-policy-stephane-boghossian/SKILL.md

View on GitHub ↗

License AGPL-3.0Imported 8/3/2026Version v1Bundled 9 files

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

Privacy Policy Generator

⚖️ The prime directive (read this first, never break it)

Workflow

Step 1 — Pick the mode

Step 2 — Compute the applicable-law set FIRST (jurisdiction-first)

Step 3 — Gather practices (only the questions the selected laws require)

Track record

Benchmark

Adoption

SkillSafety

Source

Other skills for the same job

Related skills