[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6CHGDKWNQV7979E7X1SZZ6B":3,"skill-same:01M6CHGDKWNQV7979E7X1SZZ6B":81},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":49,"linkOnly":50,"markdownContent":51,"markdownBody":52,"frontMatter":53,"refName":58,"commitSha":59,"skillDirectory":60,"forksCount":61,"repositoryHtmlUrl":62,"repositoryHomepageUrl":6,"ownerHtmlUrl":63,"ownerBlogUrl":64,"ownerDescription":65,"updatedAt":66,"install":67,"resources":80},"01M6CHGDKWNQV7979E7X1SZZ6B","clerk-data-handling",null,"Handle user data, privacy, and GDPR compliance with Clerk.\nUse when implementing data export, user deletion,\nor privacy compliance features.\nTrigger with phrases like \"clerk user data\", \"clerk GDPR\",\n\"clerk privacy\", \"clerk data export\", \"clerk delete user\".","Dicklesworthstone\u002Fpi_agent_rust","Dicklesworthstone","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F35050222?v=4","01M6CG26AR942CSVMN1M5E3DSE","Jeff Emanuel","01M6CG26EPP71PSHW1VDS71121",1991,"MIT","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Fclerk-pack\u002Fskills\u002Fclerk-data-handling\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],"data","clerk data handling","clerk","use","when","data export","features","implementing","deletion","with","gdpr compliance","trigger","io","export","delete","user","edit","write","read","grep","Bash","privacy","gdpr","compliance","npm","2026-11-10 10:12:30",false,"---\nname: clerk-data-handling\ndescription: |\n  Handle user data, privacy, and GDPR compliance with Clerk.\n  Use when implementing data export, user deletion,\n  or privacy compliance features.\n  Trigger with phrases like \"clerk user data\", \"clerk GDPR\",\n  \"clerk privacy\", \"clerk data export\", \"clerk delete user\".\nallowed-tools: Read, Write, Edit, Bash(npm:*), Grep\nversion: 1.0.0\nlicense: MIT\nauthor: Jeremy Longshore \u003Cjeremy@intentsolutions.io>\n---\n\n# Clerk Data Handling\n\n## Overview\nManage user data, implement privacy features, and ensure compliance with regulations.\n\n## Prerequisites\n- Clerk integration working\n- Understanding of GDPR\u002FCCPA requirements\n- Database with user-related data\n\n## Instructions\n\n### Step 1: User Data Export\n```typescript\n\u002F\u002F lib\u002Fdata-export.ts\nimport { clerkClient } from '@clerk\u002Fnextjs\u002Fserver'\nimport { db } from '.\u002Fdb'\n\ninterface UserDataExport {\n  clerk: ClerkUserData\n  application: ApplicationUserData\n  exportedAt: string\n}\n\ninterface ClerkUserData {\n  id: string\n  email: string | undefined\n  firstName: string | null\n  lastName: string | null\n  createdAt: Date\n  lastSignIn: Date | null\n  metadata: Record\u003Cstring, any>\n}\n\ninterface ApplicationUserData {\n  profile: any\n  orders: any[]\n  preferences: any\n  activityLog: any[]\n}\n\nexport async function exportUserData(userId: string): Promise\u003CUserDataExport> {\n  const client = await clerkClient()\n\n  \u002F\u002F Get Clerk user data\n  const clerkUser = await client.users.getUser(userId)\n\n  \u002F\u002F Get application data\n  const [profile, orders, preferences, activityLog] = await Promise.all([\n    db.userProfile.findUnique({ where: { clerkId: userId } }),\n    db.order.findMany({ where: { userId }, orderBy: { createdAt: 'desc' } }),\n    db.userPreference.findMany({ where: { userId } }),\n    db.activityLog.findMany({\n      where: { userId },\n      orderBy: { timestamp: 'desc' },\n      take: 1000\n    })\n  ])\n\n  return {\n    clerk: {\n      id: clerkUser.id,\n      email: clerkUser.primaryEmailAddress?.emailAddress,\n      firstName: clerkUser.firstName,\n      lastName: clerkUser.lastName,\n      createdAt: new Date(clerkUser.createdAt),\n      lastSignIn: clerkUser.lastSignInAt ? new Date(clerkUser.lastSignInAt) : null,\n      metadata: {\n        public: clerkUser.publicMetadata,\n        \u002F\u002F Note: privateMetadata should be handled carefully\n      }\n    },\n    application: {\n      profile: sanitizeForExport(profile),\n      orders: orders.map(sanitizeForExport),\n      preferences: preferences.map(sanitizeForExport),\n      activityLog: activityLog.map(sanitizeForExport)\n    },\n    exportedAt: new Date().toISOString()\n  }\n}\n\nfunction sanitizeForExport(data: any): any {\n  if (!data) return null\n\n  \u002F\u002F Remove internal fields\n  const { id, createdAt, updatedAt, ...rest } = data\n  return rest\n}\n```\n\n### Step 2: User Deletion (Right to be Forgotten)\n```typescript\n\u002F\u002F lib\u002Fuser-deletion.ts\nimport { clerkClient } from '@clerk\u002Fnextjs\u002Fserver'\nimport { db } from '.\u002Fdb'\n\ninterface DeletionResult {\n  success: boolean\n  deletedFrom: string[]\n  errors: string[]\n}\n\nexport async function deleteUserCompletely(userId: string): Promise\u003CDeletionResult> {\n  const result: DeletionResult = {\n    success: true,\n    deletedFrom: [],\n    errors: []\n  }\n\n  \u002F\u002F Step 1: Delete from application database\n  try {\n    await db.$transaction([\n      \u002F\u002F Delete related records first (foreign key constraints)\n      db.activityLog.deleteMany({ where: { userId } }),\n      db.order.deleteMany({ where: { userId } }),\n      db.userPreference.deleteMany({ where: { userId } }),\n      db.userProfile.delete({ where: { clerkId: userId } })\n    ])\n    result.deletedFrom.push('application_database')\n  } catch (error: any) {\n    result.errors.push(`Database deletion failed: ${error.message}`)\n    result.success = false\n  }\n\n  \u002F\u002F Step 2: Delete from Clerk\n  try {\n    const client = await clerkClient()\n    await client.users.deleteUser(userId)\n    result.deletedFrom.push('clerk')\n  } catch (error: any) {\n    result.errors.push(`Clerk deletion failed: ${error.message}`)\n    result.success = false\n  }\n\n  \u002F\u002F Step 3: Delete from external services\n  try {\n    await deleteFromExternalServices(userId)\n    result.deletedFrom.push('external_services')\n  } catch (error: any) {\n    result.errors.push(`External service deletion failed: ${error.message}`)\n  }\n\n  \u002F\u002F Log deletion for audit\n  await logDeletionEvent(userId, result)\n\n  return result\n}\n\nasync function deleteFromExternalServices(userId: string) {\n  \u002F\u002F Delete from analytics\n  \u002F\u002F Delete from email service\n  \u002F\u002F Delete from payment provider\n  \u002F\u002F etc.\n}\n\nasync function logDeletionEvent(userId: string, result: DeletionResult) {\n  \u002F\u002F Maintain audit log of deletions (anonymized)\n  await db.deletionLog.create({\n    data: {\n      anonymizedId: hashUserId(userId),\n      deletedAt: new Date(),\n      success: result.success,\n      errors: result.errors\n    }\n  })\n}\n```\n\n### Step 3: Data Retention Policies\n```typescript\n\u002F\u002F lib\u002Fdata-retention.ts\nimport { db } from '.\u002Fdb'\nimport { clerkClient } from '@clerk\u002Fnextjs\u002Fserver'\n\ninterface RetentionPolicy {\n  activityLogs: number \u002F\u002F days\n  sessions: number \u002F\u002F days\n  inactiveUsers: number \u002F\u002F days\n}\n\nconst RETENTION_POLICY: RetentionPolicy = {\n  activityLogs: 90,\n  sessions: 30,\n  inactiveUsers: 365\n}\n\nexport async function enforceRetentionPolicy() {\n  const now = new Date()\n\n  \u002F\u002F Clean up old activity logs\n  const activityCutoff = new Date(\n    now.getTime() - RETENTION_POLICY.activityLogs * 24 * 60 * 60 * 1000\n  )\n\n  const deletedLogs = await db.activityLog.deleteMany({\n    where: {\n      timestamp: { lt: activityCutoff }\n    }\n  })\n\n  console.log(`Deleted ${deletedLogs.count} old activity logs`)\n\n  \u002F\u002F Identify inactive users for notification\n  const inactiveCutoff = new Date(\n    now.getTime() - RETENTION_POLICY.inactiveUsers * 24 * 60 * 60 * 1000\n  )\n\n  const inactiveUsers = await db.userProfile.findMany({\n    where: {\n      lastActiveAt: { lt: inactiveCutoff },\n      notifiedAboutInactivity: false\n    }\n  })\n\n  \u002F\u002F Notify inactive users before deletion\n  for (const user of inactiveUsers) {\n    await notifyInactiveUser(user.clerkId)\n    await db.userProfile.update({\n      where: { id: user.id },\n      data: { notifiedAboutInactivity: true }\n    })\n  }\n\n  console.log(`Notified ${inactiveUsers.length} inactive users`)\n}\n```\n\n### Step 4: Consent Management\n```typescript\n\u002F\u002F lib\u002Fconsent.ts\nimport { currentUser } from '@clerk\u002Fnextjs\u002Fserver'\n\ninterface ConsentRecord {\n  marketing: boolean\n  analytics: boolean\n  thirdParty: boolean\n  updatedAt: Date\n}\n\nexport async function getConsent(userId: string): Promise\u003CConsentRecord | null> {\n  const user = await currentUser()\n\n  if (!user) return null\n\n  return {\n    marketing: user.publicMetadata?.consent?.marketing ?? false,\n    analytics: user.publicMetadata?.consent?.analytics ?? false,\n    thirdParty: user.publicMetadata?.consent?.thirdParty ?? false,\n    updatedAt: new Date(user.publicMetadata?.consent?.updatedAt || user.createdAt)\n  }\n}\n\nexport async function updateConsent(\n  userId: string,\n  consent: Partial\u003CConsentRecord>\n) {\n  const client = await clerkClient()\n\n  const user = await client.users.getUser(userId)\n  const currentConsent = user.publicMetadata?.consent || {}\n\n  await client.users.updateUser(userId, {\n    publicMetadata: {\n      ...user.publicMetadata,\n      consent: {\n        ...currentConsent,\n        ...consent,\n        updatedAt: new Date().toISOString()\n      }\n    }\n  })\n\n  \u002F\u002F Log consent change for audit\n  await logConsentChange(userId, consent)\n}\n```\n\n### Step 5: GDPR API Endpoints\n```typescript\n\u002F\u002F app\u002Fapi\u002Fuser\u002Fdata\u002Froute.ts\nimport { auth } from '@clerk\u002Fnextjs\u002Fserver'\nimport { exportUserData } from '@\u002Flib\u002Fdata-export'\n\n\u002F\u002F Data Export (GDPR Article 20)\nexport async function GET() {\n  const { userId } = await auth()\n\n  if (!userId) {\n    return Response.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const userData = await exportUserData(userId)\n\n  return new Response(JSON.stringify(userData, null, 2), {\n    headers: {\n      'Content-Type': 'application\u002Fjson',\n      'Content-Disposition': `attachment; filename=\"user-data-${userId}.json\"`\n    }\n  })\n}\n\n\u002F\u002F app\u002Fapi\u002Fuser\u002Fdelete\u002Froute.ts\nimport { deleteUserCompletely } from '@\u002Flib\u002Fuser-deletion'\n\n\u002F\u002F Data Deletion (GDPR Article 17)\nexport async function DELETE() {\n  const { userId } = await auth()\n\n  if (!userId) {\n    return Response.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  \u002F\u002F Require confirmation\n  const confirmed = request.headers.get('X-Confirm-Delete') === 'true'\n  if (!confirmed) {\n    return Response.json(\n      { error: 'Confirmation required', requiresHeader: 'X-Confirm-Delete: true' },\n      { status: 400 }\n    )\n  }\n\n  const result = await deleteUserCompletely(userId)\n\n  if (result.success) {\n    return Response.json({ message: 'Account deleted successfully' })\n  } else {\n    return Response.json(\n      { error: 'Partial deletion', details: result },\n      { status: 500 }\n    )\n  }\n}\n```\n\n### Step 6: Audit Logging\n```typescript\n\u002F\u002F lib\u002Faudit-log.ts\ninterface AuditEvent {\n  type: 'data_access' | 'data_export' | 'data_deletion' | 'consent_change'\n  userId: string\n  performedBy: string\n  details: Record\u003Cstring, any>\n  timestamp: Date\n}\n\nexport async function logAuditEvent(event: Omit\u003CAuditEvent, 'timestamp'>) {\n  await db.auditLog.create({\n    data: {\n      ...event,\n      timestamp: new Date()\n    }\n  })\n\n  \u002F\u002F For compliance, also log to external service\n  if (process.env.AUDIT_LOG_ENDPOINT) {\n    await fetch(process.env.AUDIT_LOG_ENDPOINT, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application\u002Fjson' },\n      body: JSON.stringify({ ...event, timestamp: new Date() })\n    })\n  }\n}\n```\n\n## Privacy Checklist\n\n- [ ] Data export functionality (GDPR Article 20)\n- [ ] Data deletion functionality (GDPR Article 17)\n- [ ] Consent management\n- [ ] Data retention policies\n- [ ] Audit logging\n- [ ] Privacy policy updated\n- [ ] Cookie consent implemented\n- [ ] Data processing agreements\n\n## Output\n- Data export functionality\n- User deletion capability\n- Consent management\n- Audit logging\n\n## Error Handling\n| Scenario | Action |\n|----------|--------|\n| Partial deletion | Retry failed services, log for manual review |\n| Export timeout | Queue export, email when complete |\n| Consent sync fail | Retry with exponential backoff |\n\n## Resources\n- [GDPR Requirements](https:\u002F\u002Fgdpr.eu)\n- [CCPA Requirements](https:\u002F\u002Foag.ca.gov\u002Fprivacy\u002Fccpa)\n- [Clerk Privacy](https:\u002F\u002Fclerk.com\u002Flegal\u002Fprivacy)\n\n## Next Steps\nProceed to `clerk-enterprise-rbac` for enterprise SSO and RBAC.\n","# Clerk Data Handling\n\n## Overview\nManage user data, implement privacy features, and ensure compliance with regulations.\n\n## Prerequisites\n- Clerk integration working\n- Understanding of GDPR\u002FCCPA requirements\n- Database with user-related data\n\n## Instructions\n\n### Step 1: User Data Export\n```typescript\n\u002F\u002F lib\u002Fdata-export.ts\nimport { clerkClient } from '@clerk\u002Fnextjs\u002Fserver'\nimport { db } from '.\u002Fdb'\n\ninterface UserDataExport {\n  clerk: ClerkUserData\n  application: ApplicationUserData\n  exportedAt: string\n}\n\ninterface ClerkUserData {\n  id: string\n  email: string | undefined\n  firstName: string | null\n  lastName: string | null\n  createdAt: Date\n  lastSignIn: Date | null\n  metadata: Record\u003Cstring, any>\n}\n\ninterface ApplicationUserData {\n  profile: any\n  orders: any[]\n  preferences: any\n  activityLog: any[]\n}\n\nexport async function exportUserData(userId: string): Promise\u003CUserDataExport> {\n  const client = await clerkClient()\n\n  \u002F\u002F Get Clerk user data\n  const clerkUser = await client.users.getUser(userId)\n\n  \u002F\u002F Get application data\n  const [profile, orders, preferences, activityLog] = await Promise.all([\n    db.userProfile.findUnique({ where: { clerkId: userId } }),\n    db.order.findMany({ where: { userId }, orderBy: { createdAt: 'desc' } }),\n    db.userPreference.findMany({ where: { userId } }),\n    db.activityLog.findMany({\n      where: { userId },\n      orderBy: { timestamp: 'desc' },\n      take: 1000\n    })\n  ])\n\n  return {\n    clerk: {\n      id: clerkUser.id,\n      email: clerkUser.primaryEmailAddress?.emailAddress,\n      firstName: clerkUser.firstName,\n      lastName: clerkUser.lastName,\n      createdAt: new Date(clerkUser.createdAt),\n      lastSignIn: clerkUser.lastSignInAt ? new Date(clerkUser.lastSignInAt) : null,\n      metadata: {\n        public: clerkUser.publicMetadata,\n        \u002F\u002F Note: privateMetadata should be handled carefully\n      }\n    },\n    application: {\n      profile: sanitizeForExport(profile),\n      orders: orders.map(sanitizeForExport),\n      preferences: preferences.map(sanitizeForExport),\n      activityLog: activityLog.map(sanitizeForExport)\n    },\n    exportedAt: new Date().toISOString()\n  }\n}\n\nfunction sanitizeForExport(data: any): any {\n  if (!data) return null\n\n  \u002F\u002F Remove internal fields\n  const { id, createdAt, updatedAt, ...rest } = data\n  return rest\n}\n```\n\n### Step 2: User Deletion (Right to be Forgotten)\n```typescript\n\u002F\u002F lib\u002Fuser-deletion.ts\nimport { clerkClient } from '@clerk\u002Fnextjs\u002Fserver'\nimport { db } from '.\u002Fdb'\n\ninterface DeletionResult {\n  success: boolean\n  deletedFrom: string[]\n  errors: string[]\n}\n\nexport async function deleteUserCompletely(userId: string): Promise\u003CDeletionResult> {\n  const result: DeletionResult = {\n    success: true,\n    deletedFrom: [],\n    errors: []\n  }\n\n  \u002F\u002F Step 1: Delete from application database\n  try {\n    await db.$transaction([\n      \u002F\u002F Delete related records first (foreign key constraints)\n      db.activityLog.deleteMany({ where: { userId } }),\n      db.order.deleteMany({ where: { userId } }),\n      db.userPreference.deleteMany({ where: { userId } }),\n      db.userProfile.delete({ where: { clerkId: userId } })\n    ])\n    result.deletedFrom.push('application_database')\n  } catch (error: any) {\n    result.errors.push(`Database deletion failed: ${error.message}`)\n    result.success = false\n  }\n\n  \u002F\u002F Step 2: Delete from Clerk\n  try {\n    const client = await clerkClient()\n    await client.users.deleteUser(userId)\n    result.deletedFrom.push('clerk')\n  } catch (error: any) {\n    result.errors.push(`Clerk deletion failed: ${error.message}`)\n    result.success = false\n  }\n\n  \u002F\u002F Step 3: Delete from external services\n  try {\n    await deleteFromExternalServices(userId)\n    result.deletedFrom.push('external_services')\n  } catch (error: any) {\n    result.errors.push(`External service deletion failed: ${error.message}`)\n  }\n\n  \u002F\u002F Log deletion for audit\n  await logDeletionEvent(userId, result)\n\n  return result\n}\n\nasync function deleteFromExternalServices(userId: string) {\n  \u002F\u002F Delete from analytics\n  \u002F\u002F Delete from email service\n  \u002F\u002F Delete from payment provider\n  \u002F\u002F etc.\n}\n\nasync function logDeletionEvent(userId: string, result: DeletionResult) {\n  \u002F\u002F Maintain audit log of deletions (anonymized)\n  await db.deletionLog.create({\n    data: {\n      anonymizedId: hashUserId(userId),\n      deletedAt: new Date(),\n      success: result.success,\n      errors: result.errors\n    }\n  })\n}\n```\n\n### Step 3: Data Retention Policies\n```typescript\n\u002F\u002F lib\u002Fdata-retention.ts\nimport { db } from '.\u002Fdb'\nimport { clerkClient } from '@clerk\u002Fnextjs\u002Fserver'\n\ninterface RetentionPolicy {\n  activityLogs: number \u002F\u002F days\n  sessions: number \u002F\u002F days\n  inactiveUsers: number \u002F\u002F days\n}\n\nconst RETENTION_POLICY: RetentionPolicy = {\n  activityLogs: 90,\n  sessions: 30,\n  inactiveUsers: 365\n}\n\nexport async function enforceRetentionPolicy() {\n  const now = new Date()\n\n  \u002F\u002F Clean up old activity logs\n  const activityCutoff = new Date(\n    now.getTime() - RETENTION_POLICY.activityLogs * 24 * 60 * 60 * 1000\n  )\n\n  const deletedLogs = await db.activityLog.deleteMany({\n    where: {\n      timestamp: { lt: activityCutoff }\n    }\n  })\n\n  console.log(`Deleted ${deletedLogs.count} old activity logs`)\n\n  \u002F\u002F Identify inactive users for notification\n  const inactiveCutoff = new Date(\n    now.getTime() - RETENTION_POLICY.inactiveUsers * 24 * 60 * 60 * 1000\n  )\n\n  const inactiveUsers = await db.userProfile.findMany({\n    where: {\n      lastActiveAt: { lt: inactiveCutoff },\n      notifiedAboutInactivity: false\n    }\n  })\n\n  \u002F\u002F Notify inactive users before deletion\n  for (const user of inactiveUsers) {\n    await notifyInactiveUser(user.clerkId)\n    await db.userProfile.update({\n      where: { id: user.id },\n      data: { notifiedAboutInactivity: true }\n    })\n  }\n\n  console.log(`Notified ${inactiveUsers.length} inactive users`)\n}\n```\n\n### Step 4: Consent Management\n```typescript\n\u002F\u002F lib\u002Fconsent.ts\nimport { currentUser } from '@clerk\u002Fnextjs\u002Fserver'\n\ninterface ConsentRecord {\n  marketing: boolean\n  analytics: boolean\n  thirdParty: boolean\n  updatedAt: Date\n}\n\nexport async function getConsent(userId: string): Promise\u003CConsentRecord | null> {\n  const user = await currentUser()\n\n  if (!user) return null\n\n  return {\n    marketing: user.publicMetadata?.consent?.marketing ?? false,\n    analytics: user.publicMetadata?.consent?.analytics ?? false,\n    thirdParty: user.publicMetadata?.consent?.thirdParty ?? false,\n    updatedAt: new Date(user.publicMetadata?.consent?.updatedAt || user.createdAt)\n  }\n}\n\nexport async function updateConsent(\n  userId: string,\n  consent: Partial\u003CConsentRecord>\n) {\n  const client = await clerkClient()\n\n  const user = await client.users.getUser(userId)\n  const currentConsent = user.publicMetadata?.consent || {}\n\n  await client.users.updateUser(userId, {\n    publicMetadata: {\n      ...user.publicMetadata,\n      consent: {\n        ...currentConsent,\n        ...consent,\n        updatedAt: new Date().toISOString()\n      }\n    }\n  })\n\n  \u002F\u002F Log consent change for audit\n  await logConsentChange(userId, consent)\n}\n```\n\n### Step 5: GDPR API Endpoints\n```typescript\n\u002F\u002F app\u002Fapi\u002Fuser\u002Fdata\u002Froute.ts\nimport { auth } from '@clerk\u002Fnextjs\u002Fserver'\nimport { exportUserData } from '@\u002Flib\u002Fdata-export'\n\n\u002F\u002F Data Export (GDPR Article 20)\nexport async function GET() {\n  const { userId } = await auth()\n\n  if (!userId) {\n    return Response.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const userData = await exportUserData(userId)\n\n  return new Response(JSON.stringify(userData, null, 2), {\n    headers: {\n      'Content-Type': 'application\u002Fjson',\n      'Content-Disposition': `attachment; filename=\"user-data-${userId}.json\"`\n    }\n  })\n}\n\n\u002F\u002F app\u002Fapi\u002Fuser\u002Fdelete\u002Froute.ts\nimport { deleteUserCompletely } from '@\u002Flib\u002Fuser-deletion'\n\n\u002F\u002F Data Deletion (GDPR Article 17)\nexport async function DELETE() {\n  const { userId } = await auth()\n\n  if (!userId) {\n    return Response.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  \u002F\u002F Require confirmation\n  const confirmed = request.headers.get('X-Confirm-Delete') === 'true'\n  if (!confirmed) {\n    return Response.json(\n      { error: 'Confirmation required', requiresHeader: 'X-Confirm-Delete: true' },\n      { status: 400 }\n    )\n  }\n\n  const result = await deleteUserCompletely(userId)\n\n  if (result.success) {\n    return Response.json({ message: 'Account deleted successfully' })\n  } else {\n    return Response.json(\n      { error: 'Partial deletion', details: result },\n      { status: 500 }\n    )\n  }\n}\n```\n\n### Step 6: Audit Logging\n```typescript\n\u002F\u002F lib\u002Faudit-log.ts\ninterface AuditEvent {\n  type: 'data_access' | 'data_export' | 'data_deletion' | 'consent_change'\n  userId: string\n  performedBy: string\n  details: Record\u003Cstring, any>\n  timestamp: Date\n}\n\nexport async function logAuditEvent(event: Omit\u003CAuditEvent, 'timestamp'>) {\n  await db.auditLog.create({\n    data: {\n      ...event,\n      timestamp: new Date()\n    }\n  })\n\n  \u002F\u002F For compliance, also log to external service\n  if (process.env.AUDIT_LOG_ENDPOINT) {\n    await fetch(process.env.AUDIT_LOG_ENDPOINT, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application\u002Fjson' },\n      body: JSON.stringify({ ...event, timestamp: new Date() })\n    })\n  }\n}\n```\n\n## Privacy Checklist\n\n- [ ] Data export functionality (GDPR Article 20)\n- [ ] Data deletion functionality (GDPR Article 17)\n- [ ] Consent management\n- [ ] Data retention policies\n- [ ] Audit logging\n- [ ] Privacy policy updated\n- [ ] Cookie consent implemented\n- [ ] Data processing agreements\n\n## Output\n- Data export functionality\n- User deletion capability\n- Consent management\n- Audit logging\n\n## Error Handling\n| Scenario | Action |\n|----------|--------|\n| Partial deletion | Retry failed services, log for manual review |\n| Export timeout | Queue export, email when complete |\n| Consent sync fail | Retry with exponential backoff |\n\n## Resources\n- [GDPR Requirements](https:\u002F\u002Fgdpr.eu)\n- [CCPA Requirements](https:\u002F\u002Foag.ca.gov\u002Fprivacy\u002Fccpa)\n- [Clerk Privacy](https:\u002F\u002Fclerk.com\u002Flegal\u002Fprivacy)\n\n## Next Steps\nProceed to `clerk-enterprise-rbac` for enterprise SSO and RBAC.\n",{"name":5,"author":54,"license":15,"version":55,"description":56,"allowed-tools":57},"Jeremy Longshore \u003Cjeremy@intentsolutions.io>","1.0.0","Handle user data, privacy, and GDPR compliance with Clerk.\nUse when implementing data export, user deletion,\nor privacy compliance features.\nTrigger with phrases like \"clerk user data\", \"clerk GDPR\",\n\"clerk privacy\", \"clerk data export\", \"clerk delete user\".\n","Read, Write, Edit, Bash(npm:*), Grep","main","7439377908fdee98c9bb5863391212b95453de95","tests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Fclerk-pack\u002Fskills\u002Fclerk-data-handling",234,"https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust","https:\u002F\u002Fgithub.com\u002FDicklesworthstone","https:\u002F\u002Fwww.jeffreyemanuel.com\u002F","Building in NY","2026-11-13 11:50:27",{"source":8,"skillName":5,"commands":68,"prompt":78,"zipAvailable":79},[69,72,75],{"tool":70,"command":71},"npx","npx skills add Dicklesworthstone\u002Fpi_agent_rust --skill clerk-data-handling",{"tool":73,"command":74},"bunx","bunx skills add Dicklesworthstone\u002Fpi_agent_rust --skill clerk-data-handling",{"tool":76,"command":77},"pnpm","pnpm dlx skills add Dicklesworthstone\u002Fpi_agent_rust --skill clerk-data-handling","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Fclerk-pack\u002Fskills\u002Fclerk-data-handling\u002FSKILL.md",true,[],[82,122,146,170,197,219],{"skillNo":83,"name":84,"nameZh":6,"description":85,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":86,"licenseFileUrl":87,"sourceHtmlUrl":88,"categories":89,"keywords":95,"publishedAt":49},"01M6FEGPPK0ZTKCCM0R3E3KS33","web-artifacts-builder","Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn\u002Fui). Use for complex artifacts requiring state management, routing, or shadcn\u002Fui components - not for simple single-file HTML\u002FJSX artifacts.","Apache-2.0","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FSKILL.md",[90],{"categoryNo":91,"categoryName":92,"taxonomyType":93,"taxonomyTypeDesc":94},"01JBSEEDCAT000000000000009","前端开发","SCENARIO","使用场景",[96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,27,114,115,116,117,118,119,120,121],"web artifacts builder","web","artifacts","artifacts builder","builder","frontend","css","components","react","component","routing","state management","state","shadcn","file","ui","Tools","Tailwind","html","single-file","simple","ui components","multi","for","jsx","suite",{"skillNo":123,"name":124,"nameZh":6,"description":125,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":86,"licenseFileUrl":126,"sourceHtmlUrl":127,"categories":128,"keywords":133,"publishedAt":49},"01M6FEE9VTK1W4GY21AKREJXRG","webapp-testing","Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FSKILL.md",[129,132],{"categoryNo":130,"categoryName":131,"taxonomyType":93,"taxonomyTypeDesc":94},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":91,"categoryName":92,"taxonomyType":93,"taxonomyTypeDesc":94},[134,135,136,101,137,138,97,139,140,141,111,142,143,144,145,33,119],"testing","webapp testing","webapp","screenshots","playwright","debugging","toolkit","browser","logs","applications","behavior","local",{"skillNo":147,"name":148,"nameZh":6,"description":149,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":150,"sourceHtmlUrl":151,"categories":152,"keywords":153,"publishedAt":49},"01M6FE20F7ZTQBFWKF4MPJ2SBX","neuropixels-analysis","Neuropixels neural recording analysis. Load SpikeGLX\u002FOpenEphys data, preprocess, motion correction, Kilosort4 spike sorting, quality metrics, Allen\u002FIBL curation, AI-assisted visual analysis, for Neuropixels 1.0\u002F2.0 extracellular electrophysiology. Use when working with neural recordings, spike sorting, extracellular electrophysiology, or when the user mentions Neuropixels, SpikeGLX, Open Ephys, Kilosort, quality metrics, or unit curation.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fneuropixels-analysis\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fneuropixels-analysis\u002FSKILL.md",[],[154,155,156,157,24,158,159,39,27,160,161,162,163,164,165,166,33,167,168,169,119,28],"analysis","neuropixels analysis","spike","metrics","open","quality","recordings","Neural","motion","visual","quality metrics","unit","sorting","curation","recording","load",{"skillNo":171,"name":172,"nameZh":6,"description":173,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":86,"licenseFileUrl":174,"sourceHtmlUrl":175,"categories":176,"keywords":180,"publishedAt":49},"01M6FDP0PDK6F1GGX395C7625Z","skill-creator","Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fskill-creator\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fskill-creator\u002FSKILL.md",[177],{"categoryNo":178,"categoryName":179,"taxonomyType":93,"taxonomyTypeDesc":94},"01JBSEEDCAT000000000000023","Skill与智能体开发",[181,182,183,184,185,186,187,188,189,190,191,192,193,194,33,119,195,28,196],"skill creator","creator","workflows","create","update","capabilities","knowledge","tool","integrations","specialized","guide","new skill","existing skill","users","Existing","new",{"skillNo":198,"name":199,"nameZh":6,"description":200,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":201,"sourceHtmlUrl":202,"categories":203,"keywords":205,"publishedAt":49},"01M6FDM8Y7VK7NYG9SM7QPA3PW","notebooklm","Use this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers from Gemini. Browser automation, library management, persistent auth. Drastically reduced hallucinations through document-only responses.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fnotebooklm\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fnotebooklm\u002FSKILL.md",[204],{"categoryNo":178,"categoryName":179,"taxonomyType":93,"taxonomyTypeDesc":94},[199,206,207,208,209,210,211,141,212,213,27,214,215,216,217,119,218],"google","browser automation","gemini","automation","auth","code","library","management","only","document","query","Citation","source",{"skillNo":220,"name":221,"nameZh":6,"description":222,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":86,"licenseFileUrl":223,"sourceHtmlUrl":224,"categories":225,"keywords":232,"publishedAt":49},"01M6FDHPXE10J3XGTCH5HBHS1M","slack-gif-creator","Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like \"make me a GIF of X doing Y for Slack.\"","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fslack-gif-creator\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fslack-gif-creator\u002FSKILL.md",[226,229],{"categoryNo":227,"categoryName":228,"taxonomyType":93,"taxonomyTypeDesc":94},"01JBSEEDCAT000000000000005","邮件与沟通",{"categoryNo":230,"categoryName":231,"taxonomyType":93,"taxonomyTypeDesc":94},"01JBSEEDCAT000000000000016","图像与多媒体",[233,234,235,182,236,112,237,238,187,27,239,194,240,241,242,119,243,28],"slack gif creator","slack","gif","validation","constraints","Animation","me","make","Utilities","concepts","request"]