Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Show a cookie consent notice — measured AI agent skill | DecimalAI

thedaviddias/cookie-consent

SkillScore96Maintained

Use when reviewing a website for GDPR/CCPA compliance, specifically whether cookie consent is obtained before non-essential cookies are set.

by thedaviddias

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Frontend / UI pack

decimalai skills pull thedaviddias-cookie-consent

Get this skill — curl · raw file

curl -fsSL https://app.decimal.ai/s/thedaviddias-cookie-consent/SKILL.md

Raw file: /s/thedaviddias-cookie-consent/SKILL.md ↗ · machine-readable summary at /s/thedaviddias-cookie-consent.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

24 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 3d ago

Yes — +8% lift+6% tokens0% turns96% of whole cases pass with skill (23/24)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-01	✗→✓	▲ Improved	13%	0%
case-12	✗→✓	▲ Improved	-14%	0%
case-02	✓→✓	＝ Same ✓	13%	0%
case-03	✓→✓	＝ Same ✓	1%	0%
case-05	✓→✓	＝ Same ✓	7%	0%

Showing 5 of 24 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

thedaviddias / front-end-checklist

skills/cookie-consent/SKILL.md

View on GitHub ↗

Imported 8/3/2026Version v1Bundled 1 file

Skill contents

references/

SKILL.md

Show a cookie consent notice

GDPR violations can result in fines up to €20 million or 4% of global annual turnover. Regulators across the EU have actively fined organizations for deploying tracking cookies without valid consent.

Quick Reference

GDPR requires consent before setting non-essential cookies (analytics, advertising, personalization)
Essential/strictly necessary cookies (session, security, login) do not require consent
Consent must be freely given, specific, informed, and unambiguous — pre-ticked boxes are invalid
Users must be able to withdraw consent as easily as they gave it
Scripts and pixels must not load until the user has actively accepted their category
Non-essential trackers must stay blocked until consent and after revocation

Check

Check whether the site displays a cookie consent notice before setting non-essential cookies. Verify that analytics, advertising, and tracking scripts do not load until the user has actively accepted. Check whether users can reject non-essential cookies without losing access to content.

Fix

Implement a cookie consent management platform (CMP) that blocks non-essential scripts until consent is granted. Configure analytics and tracking tags to initialize only after explicit consent. Provide a mechanism for users to change their consent preferences at any time.

Explain

Explain what GDPR requires for cookie consent, the difference between essential and non-essential cookies, why pre-ticked boxes are invalid consent, and what a technically compliant consent implementation looks like.

Code Review

Review server config, headers, forms, and integration points related to Show a cookie consent notice. Flag exact responses, cookies, or browser behaviors that violate the rule, and verify them against the effective production-like response. Check that tracker initialization is gated on consent and that a persistent "change cookie settings" path exists after the banner is gone.

For full implementation details, code examples, and framework-specific guidance, see references/rule.md.

Rule page: https://frontendchecklist.io/en/rules/privacy/cookie-consent

Want to see if thedaviddias/cookie-consent would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.