Dpia Generator

Use whenever the user wants to run, draft, or stress-test a Data Protection Impact Assessment or any jurisdiction's equivalent for a new or modified processing. Triggers: "run a DPIA on", "assess privacy risk for", "is this Article 35 / high risk?", "need a Colorado data protection assessment / LGPD RIPD / PIPL PIPIA / Law 25 PIA?", any new-processing description (tool, vendor, AI feature, monitoring) with a privacy-risk question, or a pasted vendor page with a GDPR/ICO/CNIL/EDPB/CPPA/ANPD question. Also "index our privacy notice" — a portable notice profile later runs check for policy drift.

9 starsTesting & QA

Install

skills CLI (Claude Code, Cursor, Codex and more)
npx skills add wnallen/dpia-generator --skill dpia-generator
Manual install
git clone --depth 1 https://github.com/wnallen/dpia-generator.git /tmp/dpia-generator
mkdir -p ~/.claude/skills
cp -r /tmp/dpia-generator/. ~/.claude/skills/dpia-generator

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# DPIA Generator

You are acting as outside privacy counsel preparing a Data Protection Impact Assessment for the client's internal privacy register. Your work product is attorney-work-product eligible: written in counsel's voice, anchored in the GDPR text, published supervisory authority guidance and — where the processing spans other covered jurisdictions — the corresponding regulators' own published material, and structured to survive review by a Data Protection Officer, a supervisory authority, and — if it ever comes to it — a litigation hold. Where a covered regime's document is producible or filed by design, the privilege posture changes with it; the destination check governs. The same is true where no counsel is in the loop at all — the common DPO-led posture, since Article 35 requires no lawyer anywhere in the process: the analytical style is unchanged, but the document ships as a DPO-reviewed confidential draft, not as attorney work product (the builder derives the markings from whether the manifest names a counsel).

A DPIA is not a fill-in-the-blank form. It is a reasoned legal assessment under Article 35 GDPR of whether a processing activity, after controls, presents risks that the controller can defensibly accept. Treat the output that way.

---

## Fast-Path Default
Read the full skill on GitHub

Details

Skill name
dpia-generator
License
MIT
Repo updated
8 October 2026

FAQ

What does the Dpia Generator skill do?

Use whenever the user wants to run, draft, or stress-test a Data Protection Impact Assessment or any jurisdiction's equivalent for a new or modified processing. Triggers: "run a DPIA on", "assess privacy risk for", "is this Article 35 / high risk?", "need a Colorado data protection assessment / LGPD RIPD / PIPL PIPIA / Law 25 PIA?", any new-processing description (tool, vendor, AI feature, monitoring) with a privacy-risk question, or a pasted vendor page with a GDPR/ICO/CNIL/EDPB/CPPA/ANPD question. Also "index our privacy notice" — a portable notice profile later runs check for policy drift.

How do I install the Dpia Generator skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add wnallen/dpia-generator --skill dpia-generator. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Dpia Generator popular?

It lives in wnallen/dpia-generator, which has 9 GitHub stars and 0 forks.

Related skills

Autoreg

7

Ikhdev1/autoreg-agent-skill

Build and run automated service registrations end to end: recon a signup flow, generate an adapter, drive real Chromium/Gecko with a persistent identity, read email OTP codes, solve or inject CAPTCHA tokens, route through proxies, and verify accounts. Use this skill whenever the user asks to auto-register or mass register on a service, create accounts, automate signup/registration, bypass browser fingerprint checks, wire temporary mail or SMS, or turn a manual signup flow into a repeatable script — even if they do not say "autoreg". Also use it for QA/test-account provisioning and for debuggin

Testing & QA

Universal Checkout

7

zincio/skills

Discover, buy, track, and return real products from Amazon, Walmart, Target and almost any other US online retailer through the Zinc API (zinc.com). Needs no account to begin — the agent mints its own test key, then earns a live key and a $5 starter credit once its operator approves it. Pay from a pre-funded wallet, per request over MPP or x402, or with a Stripe Link card.

Testing & QAIn 1 list

Supertest

8

renanmpimentel/supertest

Use when creating, changing, running, or auditing unit and integration tests, investigating tests that pass without observing outcomes, or analyzing application mutations and Necessist findings.

Testing & QA

Arduino Firmware Building

8

nguyentoanthang/arduino-firmware-building

Use this skill when the user wants to design, build, upload and test firmware for any Arduino-compatible board end to end with arduino-cli: identifies the board and FQBN via cli search, requires user-provided board/library documentation, validates requirements, writes plan and comprehensive test spec (including edge cases, boundary limits, negative inputs, and fault resilience), stops for user review & approval, implements functional code and test cases via two parallel subagents followed by a third integration & compilation subagent, uploads with user-assisted bootloader/reset steps, captures

Testing & QA

Autogrind

7

ttttonyhe/autogrind

Engage in 24x7 auto-work mode. Continuously grind through improvements, fixes, tests, and polish without stopping until you say so. For long-running sessions across code, ML/data, research, design, or writing. Not for single bounded tasks. Trigger phrases: /autogrind, /自己动, 'autogrind this', 'grind on this', 'keep working don't stop', 'work until I say stop', 'keep improving', 'keep going'.

Testing & QA

Jest

9

anivar/jest-skill

Jest best practices, patterns, and API guidance for JavaScript/TypeScript testing. Covers mock design, async testing, matchers, timer mocks, snapshots, module mocking, configuration, and CI optimization. Baseline: jest ^30.5.2. Triggers on: jest imports, describe, it, test, expect, jest.fn, jest.mock, jest.spyOn, mentions of "jest", "unit test", "test suite", or "mock".

Testing & QA

Browse the most popular Claude skills, all testing & qa skills, or write your own with the skills generator.