Dpa

Data Processing Agreement reference — GDPR Article 28, processor obligations, sub-processor management, and cross-border transfers. Use when drafting or revi...

Security Scan

The skill is an instruction/documentation helper that prints GDPR/DPA guidance from a local shell script; its requested resources and behavior align with that purpose.

Purpose & Capability

Name/description match the included functionality: the skill provides DPA/GDPR reference text and review checklists. There are no unrelated credentials, binaries, or install steps. Minor inconsistency: SKILL.md documents a configurable DPA_DIR but the included script does not read or write that directory (the configuration appears unused).

Instruction Scope

Runtime instructions simply call the bundled scripts/script.sh commands to print guidance (intro, article28, clauses, etc.). The script only emits static help text via here-documents and does not perform file I/O, network calls, or access secrets.

Install Mechanism

No install spec is present (instruction-only skill with an included script). Nothing is downloaded or extracted; no packages or external installers are requested.

Credentials

The skill declares no required environment variables or credentials (good). SKILL.md lists an optional DPA_DIR configuration variable, but the script does not use any environment variables — this is a harmless mismatch but worth noting.

Persistence & Privilege

Skill does not request persistent privileges or 'always' inclusion. Autonomous invocation is allowed (platform default) but the skill's local-only behavior limits its blast radius.

Assessment

This skill appears to be a local read-only reference tool: it runs a bundled shell script that prints GDPR/DPA guidance and does not access credentials, make network requests, or modify system configuration. You can safely install/use it if you only need offline reference text. Before installing, review the script (scripts/script.sh) yourself to confirm no unexpected commands were added, and be aware SKILL.md mentions a DPA_DIR setting that the script does not use (harmless but inconsistent). If you expect the skill to store or load local templates, ask the author or verify the script is updated to use DPA_DIR.

DPA — Data Processing Agreement Reference

Quick-reference skill for Data Processing Agreements, GDPR Article 28 compliance, and processor obligations.

When to Use

• Drafting a DPA with a new vendor or service provider
• Reviewing a vendor's DPA for GDPR compliance
• Understanding controller vs processor obligations
• Managing sub-processor chains
• Handling cross-border data transfers in DPAs

Commands

intro

scripts/script.sh intro

Overview of DPAs — what they are, when required, legal basis.

article28

scripts/script.sh article28

GDPR Article 28 requirements — mandatory DPA clauses.

roles

scripts/script.sh roles

Controller vs Processor vs Sub-processor — roles and responsibilities.

clauses

scripts/script.sh clauses

Essential DPA clauses — scope, obligations, security, and termination.

subprocessors

scripts/script.sh subprocessors

Sub-processor management — authorization, notification, and liability.

transfers

scripts/script.sh transfers

Cross-border data transfers — SCCs, adequacy decisions, and safeguards.

breaches

scripts/script.sh breaches

Data breach handling in DPAs — notification, cooperation, and remediation.

checklist

scripts/script.sh checklist

DPA review checklist for compliance verification.

help

scripts/script.sh help

version

scripts/script.sh version

Configuration

Variable	Description
DPA_DIR	Data directory (default: ~/.dpa/)

---

Powered by BytesAgain | bytesagain.com | [e-mail]