[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6CTF6605HXVSWZ5MFQSXWN0":3,"skill-same:01M6CTF6605HXVSWZ5MFQSXWN0":72},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":31,"linkOnly":32,"markdownContent":33,"markdownBody":34,"frontMatter":35,"refName":39,"commitSha":40,"skillDirectory":41,"forksCount":42,"repositoryHtmlUrl":43,"repositoryHomepageUrl":6,"ownerHtmlUrl":44,"ownerBlogUrl":6,"ownerDescription":45,"updatedAt":46,"install":47,"resources":59},"01M6CTF6605HXVSWZ5MFQSXWN0","privacy-data-handling",null,"Defines how personal data is retained, accessed and deleted. Use when setting up or auditing data handling.","vibbs\u002Fcompany-os","vibbs","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F7379149?v=4","01M6CT6M03CAS1H7RA89F3965B","Vibbs Dod","01M6CT6M4MY60C9FFQ3AAR2RSK",6,"MIT","https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os\u002Fblob\u002Fmain\u002Fos\u002Fskills\u002Fprivacy-data-handling\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[24,25,26,27,28,29,30],"privacy","data","privacy data handling","personal","how","use","up","2026-11-10 10:12:30",false,"---\nname: privacy-data-handling\ndescription: Defines how personal data is retained, accessed and deleted. Use when setting up or auditing data handling.\nruntimes:\n  claude:\n    user-invocable: true\n---\n\n# Privacy & Data Handling\n\n## Reference\n- **ID**: S-RISK-02\n- **Category**: Risk\n- **Inputs**: data inventory, regulatory requirements (GDPR, CCPA), system architecture\n- **Outputs**: data handling policy document → artifacts\u002Frisk\u002F\n- **Used by**: Ops & Risk Agent\n- **Tool scripts**: .\u002Ftools\u002Fartifact\u002Fvalidate.sh\n\n## Purpose\nEstablishes clear policies for data retention, access controls, and deletion procedures that comply with privacy regulations and protect user data throughout its lifecycle from collection to destruction.\n\n## Procedure\n\n### Step 0: Identify Data Processors\n\nRead `company.config.yaml` and extract third-party data processors:\n- `analytics.provider` (e.g., PostHog, Mixpanel, Plausible)\n- `email.provider` (e.g., Resend, SendGrid, Postmark)\n- `observability.error_tracking` (e.g., Sentry, Datadog)\n- `ai.llm_provider` (e.g., Anthropic, OpenAI)\n- `support.platform` (e.g., Intercom, Crisp)\n\nFor each identified processor, add a specific line to the DPA (Data Processing Agreement) checklist:\n- [ ] DPA signed with [provider]\n- [ ] Data residency confirmed (EU\u002FUS)\n- [ ] Sub-processor list reviewed\n- [ ] Deletion\u002Fexport API documented\n\n1. Inventory all personal and sensitive data collected: what data, where stored, why collected.\n2. Classify data by sensitivity level: public, internal, confidential, restricted.\n3. Define retention periods for each data category based on business need and regulatory requirements.\n4. Design access control policies: who can access what data, under what conditions, with what audit trail.\n5. Define the data deletion procedure: user-initiated deletion, retention-based expiry, right-to-be-forgotten flows.\n6. Document data processing lawful bases (consent, legitimate interest, contractual necessity).\n7. Define data breach notification procedures: detection, assessment, notification timeline.\n8. Design audit logging for all data access and modifications.\n9. Map data flows to third-party processors and define DPA requirements.\n10. Save the data handling policy to `artifacts\u002Frisk\u002F`.\n11. Validate the artifact using `.\u002Ftools\u002Fartifact\u002Fvalidate.sh`.\n\n## Quality Checklist\n- [ ] All personal data fields are inventoried\n- [ ] Data classification levels are assigned\n- [ ] Retention periods are defined and justified\n- [ ] Access controls follow principle of least privilege\n- [ ] Deletion procedures cover all storage locations (DB, backups, caches, logs)\n- [ ] Breach notification timeline meets regulatory requirements\n- [ ] Third-party data processors are documented with DPAs\n- [ ] Artifact passes validation\n","# Privacy & Data Handling\n\n## Reference\n- **ID**: S-RISK-02\n- **Category**: Risk\n- **Inputs**: data inventory, regulatory requirements (GDPR, CCPA), system architecture\n- **Outputs**: data handling policy document → artifacts\u002Frisk\u002F\n- **Used by**: Ops & Risk Agent\n- **Tool scripts**: .\u002Ftools\u002Fartifact\u002Fvalidate.sh\n\n## Purpose\nEstablishes clear policies for data retention, access controls, and deletion procedures that comply with privacy regulations and protect user data throughout its lifecycle from collection to destruction.\n\n## Procedure\n\n### Step 0: Identify Data Processors\n\nRead `company.config.yaml` and extract third-party data processors:\n- `analytics.provider` (e.g., PostHog, Mixpanel, Plausible)\n- `email.provider` (e.g., Resend, SendGrid, Postmark)\n- `observability.error_tracking` (e.g., Sentry, Datadog)\n- `ai.llm_provider` (e.g., Anthropic, OpenAI)\n- `support.platform` (e.g., Intercom, Crisp)\n\nFor each identified processor, add a specific line to the DPA (Data Processing Agreement) checklist:\n- [ ] DPA signed with [provider]\n- [ ] Data residency confirmed (EU\u002FUS)\n- [ ] Sub-processor list reviewed\n- [ ] Deletion\u002Fexport API documented\n\n1. Inventory all personal and sensitive data collected: what data, where stored, why collected.\n2. Classify data by sensitivity level: public, internal, confidential, restricted.\n3. Define retention periods for each data category based on business need and regulatory requirements.\n4. Design access control policies: who can access what data, under what conditions, with what audit trail.\n5. Define the data deletion procedure: user-initiated deletion, retention-based expiry, right-to-be-forgotten flows.\n6. Document data processing lawful bases (consent, legitimate interest, contractual necessity).\n7. Define data breach notification procedures: detection, assessment, notification timeline.\n8. Design audit logging for all data access and modifications.\n9. Map data flows to third-party processors and define DPA requirements.\n10. Save the data handling policy to `artifacts\u002Frisk\u002F`.\n11. Validate the artifact using `.\u002Ftools\u002Fartifact\u002Fvalidate.sh`.\n\n## Quality Checklist\n- [ ] All personal data fields are inventoried\n- [ ] Data classification levels are assigned\n- [ ] Retention periods are defined and justified\n- [ ] Access controls follow principle of least privilege\n- [ ] Deletion procedures cover all storage locations (DB, backups, caches, logs)\n- [ ] Breach notification timeline meets regulatory requirements\n- [ ] Third-party data processors are documented with DPAs\n- [ ] Artifact passes validation\n",{"name":5,"runtimes":36,"description":7},{"claude":37},{"user-invocable":38},true,"main","e842fb6d0e04360c47db78bc2e2e2987314d64d4","os\u002Fskills\u002Fprivacy-data-handling",2,"https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os","https:\u002F\u002Fgithub.com\u002Fvibbs","Principal Engineer · Applied AI · building ArcAI @ GrowthArc","2026-10-21 02:08:08",{"source":8,"skillName":5,"commands":48,"prompt":58,"zipAvailable":38},[49,52,55],{"tool":50,"command":51},"npx","npx skills add vibbs\u002Fcompany-os --skill privacy-data-handling",{"tool":53,"command":54},"bunx","bunx skills add vibbs\u002Fcompany-os --skill privacy-data-handling",{"tool":56,"command":57},"pnpm","pnpm dlx skills add vibbs\u002Fcompany-os --skill privacy-data-handling","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os\u002Fblob\u002Fmain\u002Fos\u002Fskills\u002Fprivacy-data-handling\u002FSKILL.md",[60,66],{"path":61,"resourceType":62,"resourceTypeDesc":63,"sizeBytes":64,"sourceHtmlUrl":65},"references\u002Fapi_reference.md","REFERENCE","参考文档",17361,"https:\u002F\u002Fgithub.com\u002FMishit18\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fclinpgx-database\u002Freferences\u002Fapi_reference.md",{"path":67,"resourceType":68,"resourceTypeDesc":69,"sizeBytes":70,"sourceHtmlUrl":71},"scripts\u002Fquery_clinpgx.py","SCRIPT","脚本",14296,"https:\u002F\u002Fgithub.com\u002FMishit18\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fclinpgx-database\u002Fscripts\u002Fquery_clinpgx.py",[73,82,90,100,116,134],{"skillNo":74,"name":75,"nameZh":6,"description":76,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":77,"categories":78,"keywords":79,"publishedAt":31},"01M6CTHBW1E64ECYGD105N4S5E","typo-field","Fixture skill with a misspelled top-level field.","https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fskills\u002Ftypo-field\u002FSKILL.md",[],[80,81],"typo field","fixture skill",{"skillNo":83,"name":84,"nameZh":6,"description":85,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":86,"categories":87,"keywords":88,"publishedAt":31},"01M6CTHABTV8FKVDHFMMKPAV51","spaced-comments","Fixture skill with comments and spaces after block keys.","https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fskills\u002Fspaced-comments\u002FSKILL.md",[],[89,81],"spaced comments",{"skillNo":91,"name":92,"nameZh":6,"description":93,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":94,"categories":95,"keywords":96,"publishedAt":31},"01M6CTH8MHC14KB65ZDHYBJW1N","crlf-comments","Fixture skill with Windows line endings.","https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fskills\u002Fcrlf-comments\u002FSKILL.md",[],[97,98,99,81],"crlf comments","CRLF","windows",{"skillNo":101,"name":102,"nameZh":6,"description":103,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":104,"categories":105,"keywords":106,"publishedAt":31},"01M6CTH6TBKTDP9G8QB1Z2K0TY","claude-fields","Fixture skill using top-level fields Claude Code documents.","https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fskills\u002Fclaude-fields\u002FSKILL.md",[],[107,108,109,110,111,112,81,113,114,115],"claude fields","explore","documents","src","grep","read","Bash","code","testing",{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":120,"categories":121,"keywords":127,"publishedAt":31},"01M6CTH46BGKXH80RWS876Y2CW","workflow-router","Maps an objective to the artifacts, stages and agents it needs. Use when deciding what happens next or which agents to involve.","https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os\u002Fblob\u002Fmain\u002Fos\u002Fskills\u002Fworkflow-router\u002FSKILL.md",[122],{"categoryNo":123,"categoryName":124,"taxonomyType":125,"taxonomyTypeDesc":126},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[128,129,130,131,132,29,133],"workflow","router","workflow router","next","maps","artifacts",{"skillNo":135,"name":136,"nameZh":6,"description":137,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":138,"categories":139,"keywords":140,"publishedAt":31},"01M6CTH27653SRVP2FMEQN3J5B","weekly-review","Summarizes your week: what shipped, AI spend, support themes, security health and next priorities. Use at the end of each week.","https:\u002F\u002Fgithub.com\u002Fvibbs\u002Fcompany-os\u002Fblob\u002Fmain\u002Fos\u002Fskills\u002Fweekly-review\u002FSKILL.md",[],[141,142,143,131,29,144,145,146,147],"weekly review","review","priorities","health","save","support","security"]