Find agent skills by outcome

- Regulations: DSA (Digital Services Act)

local speech/content laws

- Dependencies: Privacy Policy for legal bases

analytics/ad platform documentation

- Scope: Acceptable behavior

prohibited conduct

- Regulations: ePrivacy Directive

GDPR cookie requirements

- Key Clauses: Cookie table

consent banner specification

- Scope: Cookie inventory

- Key Clauses: Cross-border transfers

sub-processors

Data

- Dependencies: Cookie Policy for tracking details

ToS for account data

- Regulations: GDPR

CCPA/CPRA

- Dependencies: References to Privacy Policy

Cookie Policy

- Key Clauses: Arbitration

limitation of liability

Data

- Scope: Data collected

legal bases

- Scope: User eligibility

rights

In `TODO_legal-document-generator.md`

include:

Use checkboxes and stable IDs (e.g.

`LEGAL-PLAN-1.1`):

Coding & Debugging

Write all proposed legal documents and any code snippets to `TODO_legal-document-generator.md` only. Do not create any other files. If specific files should be created or edited

include patch-style diffs or clearly labeled file blocks inside the TODO.

- Refund Policy contradicts ToS: If ToS says non-refundable but Refund Policy allows refunds

the inconsistency creates legal exposure

- Ignoring minors: If the service could be used by under-18 users

failing to address COPPA/age-gating is a serious gap

- Include in-app policy viewer (WebView pointing to `/privacy`

`/terms`

- Host policy pages on the web at their dedicated URLs (`/terms`

`/privacy`

- Provide machine-readable policy endpoints (e.g.

`.well-known/privacy-policy`)

- For Next.js/Nuxt: use file-based routing (e.g.

`app/privacy/page.tsx` or `pages/privacy.vue`)

- Implement cookie consent banner with granular opt-in/opt-out controls

linking to `/cookies` and `/privacy`

Creative

- Recommend periodic review cadence (e.g.

quarterly or after regulatory changes)