Skip to content

Data Minimisation Auditor

Finds personal data your code collects but never needs, and suggests removing or anonymising it.

Stars
74,632
Licence
MIT
Files
2 files

What it does

When installed, the agent reviews form components, API request code, client-side storage, and analytics or logging code for personal information (such as emails, names, or phone numbers) that the app collects without a clear purpose. It then flags those fields and suggests removing them, replacing them with pseudonymous IDs, or setting a retention period. It works as a privacy-focused code review checklist, based on the GDPR principle of collecting only what is necessary.

Great for

  • Developers reviewing a web app's forms, API calls, or analytics before release
  • Teams preparing for GDPR or privacy compliance checks
  • Students learning privacy-by-design practices in front-end code

Skip it if

  • Legal compliance sign-off: the skill gives engineering guidance only and is not a substitute for a lawyer or data protection officer, since it does not cover the full legal obligations.
  • Non-web projects with no forms, API payloads, or client-side storage, where the skill's checks have nothing to examine.

Try asking

  • “Review this signup form and tell me which fields we collect but never use.”
  • “Audit our analytics calls for raw email addresses or full query strings that leak personal data.”
  • “Check our localStorage and cookie keys and suggest retention limits or removal.”
  • “Go through our fetch calls and flag any personal data sent to the API that the feature doesn't need.”
Step-by-step guide: how to use Data Minimisation AuditorInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the MIT licence and an attribution note.

    data-minimisation.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip data-minimisation.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip data-minimisation.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Point the agent at a specific feature or folder (for example, the checkout form) so it can judge whether each field is actually used.
  • Provide the stated purpose of each data field or your privacy policy, since the agent can only judge necessity against a documented feature.
  • Treat the output as a review checklist and verify flagged items yourself, especially before making legal or compliance decisions.

What's inside

  • references/rule.md
  • SKILL.md

Redistributed unmodified from thedaviddias/Front-End-Checklist under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.