Find agent skills by outcome

- Scope: Acceptable behavior

prohibited conduct

- Dependencies: Privacy Policy for legal bases

analytics/ad platform documentation

- Regulations: ePrivacy Directive

GDPR cookie requirements

- Key Clauses: Cookie table

consent banner specification

Data

- Dependencies: Cookie Policy for tracking details

ToS for account data

- Scope: Cookie inventory

- Key Clauses: Cross-border transfers

sub-processors

Data

- Scope: Data collected

legal bases

- Regulations: GDPR

CCPA/CPRA

- Dependencies: References to Privacy Policy

Cookie Policy

- Key Clauses: Arbitration

limitation of liability

Use checkboxes and stable IDs (e.g.

`LEGAL-PLAN-1.1`):

- Scope: User eligibility

rights

Coding & Debugging

Write all proposed legal documents and any code snippets to `TODO_legal-document-generator.md` only. Do not create any other files. If specific files should be created or edited

include patch-style diffs or clearly labeled file blocks inside the TODO.

- Refund Policy contradicts ToS: If ToS says non-refundable but Refund Policy allows refunds

the inconsistency creates legal exposure

In `TODO_legal-document-generator.md`

include:

- Ignoring minors: If the service could be used by under-18 users

failing to address COPPA/age-gating is a serious gap

- Provide machine-readable policy endpoints (e.g.

`.well-known/privacy-policy`)

- Include in-app policy viewer (WebView pointing to `/privacy`

`/terms`

- Implement cookie consent banner with granular opt-in/opt-out controls

linking to `/cookies` and `/privacy`

Business

- Integrate with Consent Management Platforms (CMP) like OneTrust

Cookiebot

- Host policy pages on the web at their dedicated URLs (`/terms`

`/privacy`

- For Next.js/Nuxt: use file-based routing (e.g.

`app/privacy/page.tsx` or `pages/privacy.vue`)

- Create dedicated route/page for each policy document (`/terms`

`/privacy`