
Data Minimisation Auditor
Finds personal data your code collects but never needs, and suggests removing or anonymising it.
- Repository
- thedaviddias/Front-End-Checklist
- Stars
- 74,632
- Licence
- MIT
- Files
- 2 files
What it does
When installed, the agent reviews form components, API request code, client-side storage, and analytics or logging code for personal information (such as emails, names, or phone numbers) that the app collects without a clear purpose. It then flags those fields and suggests removing them, replacing them with pseudonymous IDs, or setting a retention period. It works as a privacy-focused code review checklist, based on the GDPR principle of collecting only what is necessary.
Great for
- Developers reviewing a web app's forms, API calls, or analytics before release
- Teams preparing for GDPR or privacy compliance checks
- Students learning privacy-by-design practices in front-end code
Skip it if
- Legal compliance sign-off: the skill gives engineering guidance only and is not a substitute for a lawyer or data protection officer, since it does not cover the full legal obligations.
- Non-web projects with no forms, API payloads, or client-side storage, where the skill's checks have nothing to examine.
Try asking
- “Review this signup form and tell me which fields we collect but never use.”
- “Audit our analytics calls for raw email addresses or full query strings that leak personal data.”
- “Check our localStorage and cookie keys and suggest retention limits or removal.”
- “Go through our fetch calls and flag any personal data sent to the API that the feature doesn't need.”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 2 original files, the MIT licence and an attribution note.
data-minimisation.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip data-minimisation.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip data-minimisation.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Point the agent at a specific feature or folder (for example, the checkout form) so it can judge whether each field is actually used.
- Provide the stated purpose of each data field or your privacy policy, since the agent can only judge necessity against a documented feature.
- Treat the output as a review checklist and verify flagged items yourself, especially before making legal or compliance decisions.
What's inside
- references/rule.md
- SKILL.md
Redistributed unmodified from thedaviddias/Front-End-Checklist under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.