cloak

Engineering privacy and data governance via PII detection, data flow mapping, consent management patterns, GDPR/CCPA-compliant code implementation, and DPIA facilitation. Use when privacy-by-design implementation is needed.

الانتقال إلى التثبيت

المستودع: seaworld008/Commonly-used-high-value-skills
آخر نشاط في المصدر: ٢٧ يوليو ٢٠٢٦ في ٠٧:١٣
لغة SKILL.md المكتشفة: الإنجليزية
النجوم: ٦٤
التفرعات: ١٠

خيارات التثبيت

يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.

التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.

يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.

npx skills add https://github.com/seaworld008/Commonly-used-high-value-skills --skill cloak

يبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.

تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.

مراجعة ملفات المصدر

اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.

مستكشف الملفات

14 ملفات

SKILL.md

تعليمات المصدر · معاينة للقراءة فقط

العودة إلى البحث العودة إلى التثبيت

agent-hub

Multi-agent collaboration plugin that spawns N parallel subagents competing on the same task via git worktree isolation. Agents work independently, results are evaluated by metric or LLM judge, and the best branch is merged. Use when: user wants multiple approaches tried in parallel — code optimization, content variation, research exploration, or any task that benefits from parallel competition. Requires: a git repo.

2026-07-27

agent-workflow-designer

Design production-grade multi-agent orchestration systems. Covers five core patterns (sequential pipeline, parallel fan-out/fan-in, hierarchical delegation, event-driven, consensus), platform-specific implementations, handoff protocols, state management, error recovery, context window budgeting, and cost optimization.

2026-07-27

app-store-optimization

App Store Optimization toolkit for researching keywords, optimizing metadata, and tracking mobile app performance on Apple App Store and Google Play Store.

2026-07-27

عرض الكل من هذا المستودع

name	cloak
description	Engineering privacy and data governance via PII detection, data flow mapping, consent management patterns, GDPR/CCPA-compliant code implementation, and DPIA facilitation. Use when privacy-by-design implementation is needed.
zh_description	隐私工程、敏感信息流、同意管理和数据治理。
version	1.0.1
author	seaworld008
source	github:simota/agent-skills
source_url	https://github.com/simota/agent-skills/tree/main/cloak
license	MIT
tags	["cloak", "security"]
created_at	2026-07-27
updated_at	2026-07-27
quality	5
complexity	advanced

name	cloak
description	Engineering privacy and data governance via PII detection, data flow mapping, consent management patterns, GDPR/CCPA-compliant code implementation, and DPIA facilitation. Use when privacy-by-design implementation is needed.
zh_description	隐私工程、敏感信息流、同意管理和数据治理。
version	1.0.1
author	seaworld008
source	github:simota/agent-skills
source_url	https://github.com/simota/agent-skills/tree/main/cloak
license	MIT
tags	["cloak", "security"]
created_at	2026-07-27
updated_at	2026-07-27
quality	5
complexity	advanced

Tier	Examples	Handling
Special Category	Health data, biometrics, racial/ethnic origin, political opinions, sexual orientation	Explicit consent required, encryption mandatory, access logging, DPIA required
Sensitive	Financial data, government IDs, passwords, geolocation (precise)	Purpose limitation, encryption, access controls, retention limits
Personal	Name, email, phone, address, IP address, device ID, cookies	Lawful basis required, minimization, deletion on request
Internal	Employee IDs, internal usernames, system metadata	Standard access controls
Public	Published content, public profiles	No special handling

Category	Patterns	Severity if exposed
Direct identifiers	Full name, email, phone, SSN/MyNumber, passport	CRITICAL
Indirect identifiers	IP address, device fingerprint, cookie ID, geolocation	HIGH
Financial	Credit card, bank account, transaction history	CRITICAL
Health	Medical records, prescriptions, diagnoses	CRITICAL
Behavioral	Browsing history, purchase history, search queries	MEDIUM
AI/LLM context	Prompts containing PII, RAG-retrieved documents, embedding vectors, model fine-tuning data	HIGH-CRITICAL
Technical	User-agent, referrer, session tokens in URLs	LOW-MEDIUM

Requirement	GDPR	CCPA	APPI (Japan)	EU AI Act
Lawful basis for processing	Art. 6 (6 bases)	Not required (opt-out model)	Art. 17 (consent or exception)	N/A (AI-specific)
Right to access	Art. 15 (30 days)	§1798.100 (45 days)	Art. 33 (without delay)	Art. 86 (explainability)
Right to deletion	Art. 17 (30 days)	§1798.105 (45 days)	Art. 33 (without delay)	N/A
Data portability	Art. 20 (machine-readable)	§1798.100 (machine-readable)	Not explicit	N/A
Breach notification	Art. 33 (72 hours to DPA)	§1798.150 (no time limit, but AG)	Art. 26 (promptly to PPC)	Art. 62 (serious incidents)
Children's data	Art. 8 (parental consent <16)	COPPA applies (<13)	Art. 17 (special care)	Recital 28c (vulnerable groups)
Cross-border transfer	Art. 44-49 (SCCs, adequacy)	No restriction	Art. 28 (equivalent protection)	N/A
Automated decision-making	Art. 22 (right to opt out)	ADMT significant-decisions: opt-out + access from 2027-01-01; risk assessments from 2026-01-01 [Source: cppa.ca.gov]	Not explicit	Art. 14/27 (FRIA required)
Risk assessment	Art. 35 (DPIA)	Required for sensitive PI/ADMT (2026 regs)	Not explicit	Art. 9 (risk management system)
DPO requirement	Art. 37 (certain orgs)	Not required	Not required (recommended)	N/A
Max penalty	€20M / 4% turnover	$2,663–$7,988 per violation	Up to ¥100M	€35M / 7% turnover

cloak

خيارات التثبيت

مراجعة ملفات المصدر

Cloak

Trigger Guidance

Boundaries

Cloak

Trigger Guidance

Boundaries

Always

Ask First

Never

Core Contract

Data Classification

PII Detection Patterns

Regulation Quick Reference

Workflow

Recipes

Subcommand Dispatch

Output Routing

Collaboration

Overlap Boundaries

Reference Map

Output Requirements

Operational

AUTORUN Support

Nexus Hub Mode

Usage Notes

Common Patterns

Boundaries

Phase	Required action	Key rule	Read
`DISCOVER`	Scan codebase for PII patterns: field names, API payloads, log statements, DB schemas	Find all PII touchpoints	`reference/pii-detection.md`
`CLASSIFY`	Categorize found PII by sensitivity tier; tag with data subject category	Every field gets a tier	—
`MAP`	Trace data flows: collection point → processors → storage → third parties → deletion	Complete lineage	`reference/implementation-patterns.md`
`ASSESS`	Evaluate against applicable regulation; score risks; identify gaps	Regulation-specific	`reference/privacy-regulations.md`
`REMEDIATE`	Provide code-level fixes: minimization, consent gates, encryption, redaction, retention	Actionable patterns	`reference/implementation-patterns.md`
`VERIFY`	Privacy checklist validation; confirm no PII in logs/errors; test DSAR flows	All gaps addressed	—

Recipe	Subcommand	Default?	When to Use	Read First
PII Detection	`pii`	✓	PII detection and classification	`reference/pii-detection.md`
Data Flow Mapping	`flow`		Data flow visualization	`reference/pii-detection.md`
Consent Management	`consent`		Consent management pattern implementation	`reference/implementation-patterns.md`
DPIA	`dpia`		DPIA facilitation	`reference/privacy-regulations.md`
GDPR/CCPA Code	`gdpr`		Compliance-ready code implementation	`reference/implementation-patterns.md`
CCPA / CPRA	`ccpa`		California consumer rights, GPC, SPI limit-use, service-provider contracts	`reference/ccpa-cpra.md`
APPI (Japan)	`appi`		Japanese APPI implementation: three-tier data taxonomy, Art. 24/23, PPC reporting, special-care personal info	`reference/appi-japan.md`
Pseudonymization	`pseudonymize`		k-anonymity / l-diversity / DP / tokenization / FPE technique selection	`reference/pseudonymization-techniques.md`
Mobile Privacy	`mobile`		App Store Privacy Manifest (incl. third-party SDK) audit, Google Play Data Safety form review, 5.1.2(i) third-party AI consent UI specification, EAA / EN 301 549 mobile accessibility-as-privacy review	`reference/privacy-regulations.md`

Signal	Approach	Primary output	Read next
`pii`, `personal data`, `data leak`	PII detection scan	PII inventory + classification	`reference/pii-detection.md`
`gdpr`, `ccpa`, `privacy law`, `compliance`	Regulation compliance audit	Gap analysis + remediation plan	`reference/privacy-regulations.md`
`consent`, `opt-in`, `opt-out`, `cookie`	Consent management implementation	Consent flow patterns	`reference/implementation-patterns.md`
`data flow`, `data map`, `lineage`	Data flow mapping	Visual data flow + risk points	`reference/pii-detection.md`
`dsar`, `right to delete`, `data export`	DSAR automation	DSAR handler code	`reference/implementation-patterns.md`
`retention`, `data lifecycle`	Retention policy enforcement	TTL/cron patterns	`reference/implementation-patterns.md`
`logging`, `observability`, `audit`	Privacy-safe logging	PII redaction middleware	`reference/implementation-patterns.md`
`anonymize`, `pseudonymize`, `mask`	Data de-identification	Transform functions	`reference/implementation-patterns.md`
`dpia`, `impact assessment`	DPIA facilitation	Risk assessment document	`reference/privacy-regulations.md`
`llm`, `ai privacy`, `embedding`, `rag`	AI/LLM privacy risk assessment	PII sanitization plan + differential privacy guidance	`reference/implementation-patterns.md`
`admt`, `automated decision`	CCPA ADMT compliance	Pre-use notice + opt-out + appeal flow	`reference/privacy-regulations.md`
`eu ai act`, `fria`, `high-risk ai`	EU AI Act FRIA + GDPR DPIA dual assessment	FRIA report + DPIA + data governance plan	`reference/privacy-regulations.md`
`gpc`, `opt-out signal`, `universal opt-out`	GPC / universal opt-out signal compliance	Signal detection + visible acknowledgment + honor flow	`reference/implementation-patterns.md`
`hipaa`, `ephi`, `health data`	HIPAA Security Rule compliance	Encryption + MFA + audit controls	`reference/privacy-regulations.md`
`privacy manifest`, `PrivacyInfo.xcprivacy`, `Required Reasons API`, `ITMS-91056`	App Store Privacy Manifest audit (host + SDK)	Manifest review verdict + SDK replacement recommendations	`reference/privacy-regulations.md`
`data safety`, `play console privacy`, `ANDROID_ID`	Google Play Data Safety form audit	Form completeness + runtime-vs-declaration diff	`reference/privacy-regulations.md`
`5.1.2(i)`, `app store AI consent`, `third-party AI disclosure`	5.1.2(i) AI consent UI design	Consent ledger spec + per-provider UI + on-device fallback	`reference/privacy-regulations.md`
`EAA`, `EN 301 549`, `mobile accessibility privacy`	EAA / WCAG 2.1 AA mobile conformance	Accessibility-as-privacy audit	`reference/privacy-regulations.md`
unclear privacy request	PII detection scan	PII inventory + next steps	`reference/pii-detection.md`

Direction	Handoff	Purpose
Sentinel → Cloak	`SENTINEL_TO_CLOAK`	Security scan reveals PII exposure for privacy remediation
Canon → Cloak	`CANON_TO_CLOAK`	Standard requirements (GDPR/CCPA articles) for implementation
Lens → Cloak	`LENS_TO_CLOAK`	Codebase data flow discovery results
Scout → Cloak	`SCOUT_TO_CLOAK`	PII leak investigation findings
Cloak → Builder	`CLOAK_TO_BUILDER`	Privacy-compliant data handling patterns
Cloak → Schema	`CLOAK_TO_SCHEMA`	Data classification annotations, retention policies
Cloak → Gateway	`CLOAK_TO_GATEWAY`	API privacy headers, consent-aware endpoints
Cloak → Beacon	`CLOAK_TO_BEACON`	Privacy-safe observability, PII-redacted logging
Cloak → Scribe	`CLOAK_TO_SCRIBE`	DPIA documents, privacy policy technical specs
Native → Cloak	`NATIVE_TO_CLOAK`	Privacy Manifest draft + Data Safety form payload + third-party SDK inventory for privacy review
Cloak → Native	`CLOAK_TO_NATIVE`	Privacy Manifest / Data Safety review verdict, 5.1.2(i) consent UI specification, SDK replacement recommendations

Reference	Read this when
`reference/pii-detection.md`	You need PII field name patterns, regex for identifiers, AST scanning strategies, data classification taxonomy, common PII hiding spots.
`reference/privacy-regulations.md`	You need GDPR/CCPA/APPI article references, lawful basis decision trees, DSAR timelines, cross-border transfer rules, breach notification procedures, DPIA criteria.
`reference/implementation-patterns.md`	You need consent management code, PII redaction middleware, DSAR handler patterns, retention enforcement (TTL/cron), pseudonymization functions, privacy-safe logging, encryption patterns.
`reference/ccpa-cpra.md`	You are working on California-targeted features and need consumer-rights endpoints, GPC parsing with visible confirmation, SPI limit-use mechanics, service-provider/contractor/third-party contract distinctions, or 2026 ADMT/risk-assessment readiness.
`reference/appi-japan.md`	You are processing data of subjects in Japan and need the personal information (個人情報) / pseudonymously processed information (仮名加工情報) / anonymously processed information (匿名加工情報) distinction, Article 24 cross-border transfer paths, Article 23 opt-out filing, special care-required personal information (要配慮個人情報) consent surface, or PPC notification thresholds.
`reference/pseudonymization-techniques.md`	You are choosing a de-identification technique — k-anonymity / l-diversity / t-closeness / differential privacy parameters, tokenization vs HMAC vs FPE primitives, key custody and destruction to distinguish pseudonymized from anonymized data under GDPR Art. 4(5).
`_common/OPUS_5_AUTHORING.md`	You are sizing the privacy report, deciding adaptive thinking depth at classification/DPIA, or front-loading regulations/sensitivity/jurisdiction at SCAN. Critical for Cloak: P3, P5.
`reference/autorun-schema.md`	You are emitting the AUTORUN `_STEP_COMPLETE` block — Cloak-specific Output/Next schema.

cloak

معلومات المصدر

خيارات التثبيت

مراجعة ملفات المصدر

المزيد من هذا المستودع

Cloak

Trigger Guidance

Boundaries

المزيد من هذا المستودع

Cloak

Trigger Guidance

Boundaries

Always

Ask First

Never

Core Contract

Data Classification

PII Detection Patterns

Regulation Quick Reference

Workflow

Recipes

Subcommand Dispatch

Output Routing

Collaboration

Overlap Boundaries

Reference Map

Output Requirements

Operational

AUTORUN Support

Nexus Hub Mode

Usage Notes

Common Patterns

Boundaries