privacy-policy
An agent skill by phuryn, from phuryn/pm-skills. Tags: compliance, copy-editing, documents, legal, office.
What it does
Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review. Use when creating a privacy policy, updating data protection documentation, or preparing for compliance.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add phuryn/pm-skills --skill privacy-policyOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/phuryn/pm-skills
cp -r pm-skills/pm-toolkit/skills/privacy-policy ~/.claude/skills/privacy-policySafety box score
Grade A, minimal risk: 4 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill drafts privacy policies from product details and, if given a URL, will research the product website to infer data collection and third-party services. The main risk is not machine damage but that it can incorporate externally sourced or incomplete privacy/compliance details into a legally binding document, so human legal review is essential.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 0 (none) | No shell commands, code execution, or native scripts are shipped; it is a markdown-only drafting skill. |
| Network access | 1 (low) | It may browse a provided product site: "If $PRODUCT_URL is provided: - Visit the product website". |
| Filesystem reach | 0 (none) | The skill does not read, write, or delete local files outside its own prompt text. |
| Secrets & credentials | 0 (none) | It does not ask for or access tokens, keys, passwords, or other secret stores. |
| Privilege & persistence | 0 (none) | No sudo, service installation, shell startup edits, or other privilege changes are requested. |
| Instruction hijack surface | 0 (none) | The instructions do not tell the agent to ignore higher-priority rules, hide actions, or follow remote instructions. |
| Irreversible actions | 0 (none) | It only drafts a policy and does not itself send, publish, deploy, pay, or delete anything. |
| Transparency | 0 (none) | All shipped content is readable markdown; there are no binaries, blobs, or runtime-generated code paths. |
Before installing
- Confirm you are okay with the agent visiting any supplied product URL during drafting.
- Plan a human legal review before any policy is published.
- Verify the product team can supply accurate data-collection, retention, and third-party details.
Rated 2026-10-20 by an automated review of 1 file from the skill's repository.
Source
- Repository
- phuryn/pm-skills (all skills from this repository)
- Path
- pm-toolkit/skills/privacy-policy/SKILL.md
- Branch
- main
- Updated
- 2026-09-19
Related skills
- draft-nda — Draft a detailed Non-Disclosure Agreement between two parties covering information types, jurisdiction, and clauses needing legal review.
- google-docs — Author and edit Google Docs with the google-docs tools - structured writing, character and paragraph styling, lists, tables, images, headers/footers.
- grammar-check — Identify grammar, logical, and flow errors in text and suggest targeted fixes without rewriting the entire text.
- release-notes — Generate user-facing release notes from tickets, PRDs, or changelogs.
- review-resume — Comprehensive PM resume review and tailoring against 10 best practices including XYZ+S formula, keyword optimization, job-specific tailoring, and structure.
- summarize-meeting — Summarize a meeting transcript into structured notes with date, participants, topic, key decisions, summary points, and action items.