Gdpr

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone with access to the local data directory or exported files could read sensitive compliance or personal-data records that users choose to log.

Why it was flagged

The skill intentionally creates persistent local records of GDPR and audit activity; those records could include personal data, consent decisions, access events, or credential-rotation details entered by the user.

Skill content
All data is stored locally at `~/.local/share/gdpr/`. Each domain command writes to its own log file ... A unified `history.log` tracks all actions across commands. Use `export` to back up your data at any time.
Recommendation

Avoid entering raw secrets or unnecessary personal data, protect the local data directory, and review exported files before sharing them.