compliance-check SKILL.md skillA

compliance-check from me2resh/apexyard is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add me2resh/apexyard/compliance-check@git:20261015.37f5689

Pins git:20261015.37f5689 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
me2resh/apexyard
Path
.claude/skills/compliance-check/SKILL.md
Versions recorded
5
Latest version
git:20261015.37f5689, committed Oct 15, 2026
First version recorded
Apr 12, 2026
Size
8,841 bytes
Repository stars
542
License
MIT

GDPR + ePrivacy audit — consent, privacy policy, data handling, right-to-deletion, DPAs. Deep-dive for /launch-check compliance.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

Writing: read docs/skills/shared/writing-rule.md before you write a durable artifact.

# /compliance-check — GDPR + ePrivacy Compliance

Deep-dive regulatory compliance analysis. Checks cookie consent, privacy policy, terms of service, data handling, and user rights. Invoke when `/launch-check`'s compliance row shows WARN or FAIL, or proactively before launching in the EU/UK.

**Consumes the DFD produced by [`/dfd`](../dfd/SKILL.md) for data-handling analysis (Step 4).** The DFD's classifications table at `projects/<project>/architecture/dfd.md` is the source of truth for which fields are PII / PCI / secrets, and the DFD's external-services list is the source of truth for cross-border transfers and third-party processors. If the DFD doesn't exist, this skill falls back to its own grep-based discovery (degraded mode — surface in the output banner). See AgDR-0026 for the single-source-of-truth rationale.

## Compliance Areas

| Area | Regulation | Key requirement |
|------|-----------|-----------------|
| Cookie consent | ePrivacy Directive | Informed consent before setting non-essential cookies |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add me2resh/apexyard/compliance-check@sha256:73760edb472e47f0

The line at the top of this page pins the label git:20261015.37f5689, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_nygbwn4wmkiqasaz.svg)](https://markdownregistry.com/a/art_nygbwn4wmkiqasaz)

5 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between Apr 12, 2026 and Oct 15, 2026, about one every 47 days.

versioncommittedcommitsizeaudit
git:20261015.37f5689 latest2026-10-15 37f5689 8,841 BA view · diff
git:20260910.aac255e2026-09-10 aac255e 8,901 BA view · diff
git:20260524.44f7e7a2026-05-24 44f7e7a 8,754 BA view · diff
git:20260518.4743f322026-05-18 4743f32 8,696 BA view · diff
git:20260412.71e3e732026-04-12 71e3e73 3,885 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (8841 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

me2resh/apexyard · 542 stars · license MIT · pushed 2026-11-04 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_nygbwn4wmkiqasaz
GET https://markdownregistry.com/api/v1/resolve?ref=me2resh/apexyard/compliance-check
GET https://markdownregistry.com/api/v1/blob/73760edb472e47f0899dccc9066fea95cb0eff9c394549ebdd456ea8f9ad5fd4

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from me2resh/apexyard

accessibility-audit SKILL.md skill
me2resh/apexyard · .claude/skills/accessibility-audit/SKILL.md · WCAG 2.2 AA audit — perceivable, operable, understandable, robust criteria. Deep-dive for /launch-check accessibility.
git:20261015.37f5689 · audit A · 542 stars
agdr SKILL.md skill
me2resh/apexyard · .claude/skills/agdr/SKILL.md · Browse / search / show / stats AgDRs across the portfolio — recalls "have we decided this before?".
git:20261015.37f5689 · audit A · 542 stars
analytics-audit SKILL.md skill
me2resh/apexyard · .claude/skills/analytics-audit/SKILL.md · Analytics audit — SDK config, event naming, funnel completeness, dashboards. Deep-dive for /launch-check analytics.
git:20261015.37f5689 · audit A · 542 stars
approve-architecture SKILL.md skill
me2resh/apexyard · .claude/skills/approve-architecture/SKILL.md · Record per-PR architecture-review approval for design-artifact PRs (required by the architecture gate). ONLY on an…
git:20261015.37f5689 · audit A · 542 stars
approve-design SKILL.md skill
me2resh/apexyard · .claude/skills/approve-design/SKILL.md · Record per-PR design-review approval (UI merge gate). ONLY on an explicit per-PR designer "approved".
git:20261015.37f5689 · audit A · 542 stars
approve-merge SKILL.md skill
me2resh/apexyard · .claude/skills/approve-merge/SKILL.md · Record per-PR CEO approval and merge in one turn. ONLY on an explicit per-PR "approved" — never on umbrella "go".
git:20261022.74bff5f · audit A · 542 stars
audit-deps SKILL.md skill
me2resh/apexyard · .claude/skills/audit-deps/SKILL.md · Audit dependencies for vulnerabilities, outdated packages, and license compliance.
git:20261022.74bff5f · audit A · 542 stars
bug SKILL.md skill
me2resh/apexyard · .claude/skills/bug/SKILL.md · Create a structured bug ticket (Given/When/Then scenario, repro steps, severity).
git:20261022.74bff5f · audit A · 542 stars
c4 SKILL.md skill
me2resh/apexyard · .claude/skills/c4/SKILL.md · Generate C4 L1 (Context) + L2 (Container) Mermaid diagrams from a project's codebase. Structurizr DSL escape hatch…
git:20261015.37f5689 · audit A · 542 stars
challenge SKILL.md skill
me2resh/apexyard · .claude/skills/challenge/SKILL.md · Invoke The Contrarian (Naqid) to steelman-then-challenge an idea, feature, decision, or plan — surfaces assumptions…
git:20261015.37f5689 · audit A · 542 stars
code-review SKILL.md skill
me2resh/apexyard · .claude/skills/code-review/SKILL.md · Review a PR for quality, security, and standards compliance. Invokes the Code Reviewer agent (Rex).
git:20261022.74bff5f · audit A · 542 stars
codify-rule SKILL.md skill
me2resh/apexyard · .claude/skills/codify-rule/SKILL.md · Turn a review comment that caught a Rex-miss into a draft handbook entry — Y/N gate, source-PR footer, bucket-routed.
git:20261015.37f5689 · audit A · 542 stars

Every file in me2resh/apexyard

Other files named compliance-check

compliance-check SKILL.md skill
josstei/maestro-orchestrate · claude/skills/compliance-check/SKILL.md · Run a Maestro-style regulatory compliance review for GDPR/CCPA, cookie consent, data handling, and licensing
git:20260410.f5a5165 · audit A · 486 stars
compliance-check SKILL.md skill
josstei/maestro-orchestrate · antigravity/skills/compliance-check/SKILL.md · Run a Maestro-style regulatory compliance review for GDPR/CCPA, cookie consent, data handling, and licensing
git:20261019.2f1c8b3 · audit A · 486 stars
compliance-check SKILL.md skill
josstei/maestro-orchestrate · plugins/maestro/skills/compliance-check/SKILL.md · Run a Maestro-style regulatory compliance review for GDPR/CCPA, cookie consent, data handling, and licensing
git:20260410.f5a5165 · audit A · 486 stars
compliance-check SKILL.md skill
alebgl77/claude-inc · skills/compliance-check/SKILL.md · Compliance pre-flight for a feature, campaign, or initiative — maps the data and activity involved, checks applicable…
git:20260711.2713ff9 · audit A · 22 stars

Browse by kind, by grade A, or by owner.