Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →zebbern/regulatory-audit-generator
Builds compliance checklists for business scenarios involving GDPR, PIPL, or advertising/data laws. Outputs a structured checklist with check items, legal basis, risk levels, and actionable recommendations. Triggered by requests like "run a compliance check," "GDPR/PIPL compliance," "pre-launch review," "privacy impact assessment (PIA/DPIA)," or asking if a feature is compliant.
Passed 19 of 22 test cases with the skill, and 16 of 22 without it.
and 2 more in the full report
4 fixed15 passed either way2 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are launching an e-commerce feature that delivers personalized product recommendations and behavior-based advertising to users across China and the EU. We collect browsing histories, location details, and account info stored on cloud servers, with plans to share analytics with third-party ad networks. Please conduct a regulatory compliance audit for this scenario. We need a detailed checklist table showing specific control items, legal bases, risk ratings, current status, and proposed remediation advice. Additionally, include a summary counting high, medium, and low risks, followed by a prioritized remediation roadmap organized by urgency levels.
| Checked | Without skill | With skill |
|---|---|---|
| Categorizes remediation roadmap items using P0, P1, P2, and P3 priority levels. | Missed | Passed |
| Assigns risk levels strictly using High, Medium, or Low classifications. | Passed | Passed |
The instructions your model reads when the skill loads.
Identifies applicable laws and regulations based on the user's business scenario description, and outputs a structured compliance checklist covering major regulations such as GDPR, PIPL (Personal Information Protection Law), Advertising Law, Cybersecurity Law, and Data Security Law.
Users simply describe their business scenario, and the Agent will:
Users just need to say:
"We're launching a user profiling feature — help me create a compliance checklist."
The Agent will guide the user to provide necessary information, then output a complete compliance checklist.
| Regulation | Abbreviation | Scope | Key Focus Areas |
|---|---|---|---|
| Personal Information Protection Law | PIPL | Processing personal information within China | Informed consent, data minimization, cross-border data transfer |
| General Data Protection Regulation | GDPR | Involving EU user data | Lawful basis, data subject rights, DPO, DPIA |
| Data Security Law | DSL | Data processing activities within China | Data classification & grading, security assessment, important data export |
| Cybersecurity Law | CSL | Network operators | Multi-Level Protection Scheme (MLPS), log retention, security incident reporting |
| Advertising Law | — | Advertising publishing and operations | Prohibited superlative claims, false advertising, medical advertising |
| E-Commerce Law | — | E-commerce operators | Information disclosure, user reviews, bundled sales |
| Anti-Unfair Competition Law | — | Market business activities | Commercial bribery, false advertising, trade secret infringement |
| Consumer Protection Law | — | Consumer rights related | Right to know, fair trade rights, personal information |
| Industry | Relevant Regulations / Standards |
|---|---|
| Finance | Technical Specification for Personal Financial Information Protection (JR/T 0171), Data Security Management Measures for Banking and Insurance Institutions |
test cases passed, vs 16 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.