SKILLEMALL.ai

BD pipl-check

PIPL Compliance Check — based on 《个人信息保护法》(PIPL, 2021-11-01 施行) 及配套规则, 覆盖 8 大维度 25 项核心合规检查(告知同意/处理原则/数据安全/敏感个人信息/个人权利/ 自动化决策/跨境传输/合规治理)。免费安装;评分运行于 CQDev 云端合规引擎。 无 Key 时自动匿名试用(5 次真实云端评分 / 7 天窗口),额度用尽后引导注册。 Use when: the user explicitly asks to run the PIPL Check skill, or asks for a 个人信息保护法(PIPL)合规评估 / 中国个保法合规检查. Trigger: pipl-check, run pipl check, PIPL compliance check, 个保法检查, 个人信息保护法合规评估 Pricing: Free skill; cloud scoring is free (anonymous trial 5 runs, then register for a free API Key with 100 calls) ⚠️ Cloud scoring sends your 25 answers to compliancehub.cn; use --non-interactive for a fully offline preview that never contacts the cloud. Without a Key the skill runs an anonymous trial (up to 5 scored runs) using a local random anon_id; registering gives a free Key with 100 calls. 🔐 API Key: get a free API Key (100 free calls) at compliancehub.cn/account.html (register in the browser; the Key is shown instantly). Provide it via the COMPLIANCEHUB_API_KEY environment variable, or save it to ~/.config/compliancehub/pipl-check.key (mode 0600). Registration is done on the website — the terminal no longer collects credentials. 💡 Free preview: --non-interactive lists the 25 check items without a Key Locale: zh-CN(交互默认中文,英文可按需提供)(交互与提示以中文为主,法律条款名称保留中文原文以确保准确)。

ClawHub Agent Skills author: Wei Wu v3.0.3 MIT-0 5 files body ≈ 1 383 tokens Open the sourceclawhub.ai analyzed 2 d ago

PIPL Compliance Check — based on 《个人信息保护法》(PIPL, 2021-11-01 施行) 及配套规则, 覆盖 8 大维度 25 项核心合规检查(告知同意/处理原则/数据安全/敏感个人信息/个人权利/ 自动化决策/跨境传输/合规治理)。免费安装;评分运行于 CQDev…

As a process D 43/100 · Unfinished process — weak spots: result and completion, when it triggers, inputs and preconditions

IntegrationSecuritytype and topics are labelled automatically from the skill text
JSON
Technical rating
B
83/100
safety, quality, tests
Safety 60%
100
Quality 40%
58
Run on models
none yet
Process rating
D
43/100
Unfinished process
Result and completion w 14
0
Inputs and preconditions w 11
0
Failures and branches w 10
0
the three weakest of ten parameters · all ten

How to improve

  1. Shorten the description to 1024 characters.
For the model run — optional
  • Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
  • A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.

Guard findings · 0

✓ No critical or high findings

Files scanned: 5. Evidence is masked. Grey chips explain why severity was lowered.

Against the Agent Skills spec

  • error description-long description is 1279 chars, limit 1024
  • note frontmatter-key unknown frontmatter key "permissions"

Process rating: all ten parameters 43/100

  • 0Result and completion. Does not say what the result is
  • 0Inputs and preconditions. Does not say what the process needs to start
  • 0Failures and branches. Linear process with no failure handling
  • 0Progress reporting. Says nothing while it works
  • 20When it triggers. No condition that starts the skill
  • 30Running it twice. 2 mutating operations with no state check
  • 60Tools and files. Uses tools (bash, web, python) that frontmatter does not declare
  • 100Steps. 18 steps
  • 100Consistency. Name and required fields are in place
  • 100Execution cost. Instruction body is 1383 tokens
  • medium Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing

Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.

Quality signals

  • +5Description has no quoted example phrases that should trigger the skill
  • +4Description does not say when NOT to use the skill (false activations)
  • +3Description length 1278: 120–800 characters recommended
  • +3Output format is not stated: the model decides each time
  • +1No license
  • +2Single-language instructions
  • +4Structure: 13 headings
  • +3Step-by-step instructions: 18 items
  • +4Has examples (2 code blocks)
  • +3All 1 scripts are documented

Quality base 70; lint remarks subtract, signals add up to 100. Result: 58.

External checks

ClawHub: clean
This PIPL compliance skill is clear about its cloud scoring, API key use, and local config storage, and I did not find hidden or unrelated behavior.
LLM: benign (high) · VirusTotal: · 11 Aug 2026