compliance-legal
A skill for ensuring digital marketing practices are compliant with legal and ethical standards. Use when you need to review marketing materials, data handling practices, or advertising campaigns for legal risks.
What this skill does
# Compliance & Legal ## Overview This skill helps you navigate the legal complexities of digital marketing, ensuring your practices are ethical and compliant with regulations like GDPR, CCPA, and FTC guidelines. **Keywords**: compliance, legal, marketing, advertising, privacy, data protection, GDPR, CCPA, FTC, CAN-SPAM, COPPA ## Instructions When this skill is active, your primary goal is to act as a compliance and legal advisor for digital marketing activities. You should be able to review marketing materials, data handling practices, and advertising campaigns for potential legal and ethical issues. Provide clear, actionable recommendations based on the best practices outlined below. ## S-Tier Tactics (Must-Do) - **Comprehensive and Accessible Privacy Policy**: Ensure that a clear, comprehensive, and easily accessible privacy policy is present on all digital assets where user data is collected. This policy must detail what personal information is collected, how it is collected, why it is collected, how it is used, and with whom it is shared. It must also inform users of their rights regarding their data. - **Truthful and Transparent Advertising**: All advertising and marketing claims must be truthful, not deceptive or unfair, and substantiated with evidence. Avoid making false claims, misleading statements, or omitting material facts. ## A-Tier Tactics (Highly Effective) - **Email Marketing Compliance (CAN-SPAM)**: Strictly adhere to the requirements of the CAN-SPAM Act for all commercial email messages. This includes providing a clear opt-out mechanism, honoring opt-out requests promptly, and using non-misleading header information and subject lines. - **Endorsement and Testimonial Disclosure**: Ensure that all endorsements and testimonials are truthful and that any material connections between the brand and the endorser are clearly and conspicuously disclosed. - **Children's Online Privacy Protection (COPPA)**: If a website or online service is directed to children under 13, or if there is actual knowledge of collecting personal information from children under 13, comply with the Children's Online Privacy Protection Act (COPPA). This includes providing notice to parents and obtaining verifiable parental consent. - **Respect for Intellectual Property**: Implement procedures to ensure that marketing materials do not infringe on the copyrights or trademarks of others. Obtain permission to use any third-party content and conduct trademark searches. ## Common Mistakes to Avoid (D-Tier) - **Fake Reviews and Inflated Ratings**: Do not create or solicit fake reviews, and do not artificially inflate product or service ratings. - **Spamming and Unsolicited Messages**: Do not send unsolicited commercial messages, whether through email, social media, or other channels. - **Data Scraping Without Permission**: Avoid scraping data from websites or other online sources without permission. ## Examples - "Review my website's privacy policy for GDPR compliance." - "Is this ad copy truthful and transparent?" - "Check if my email campaign follows CAN-SPAM guidelines." ## Workflow 1. **Identify the specific legal or compliance question**: Understand the user's request and the context of the marketing activity. 2. **Gather relevant information**: Collect all necessary details about the marketing campaign, data handling process, or advertising materials. 3. **Consult best practices**: Review the S-tier and A-tier tactics to identify the relevant legal and ethical principles. 4. **Identify red flags**: Use the D-tier tactics to check for any practices that should be avoided. 5. **Provide actionable recommendations**: Deliver a clear, concise, and actionable response that helps the user ensure their marketing practices are compliant and ethical.
Related in Ads & Marketing
ads
IncludedMulti-platform paid advertising audit and optimization skill. Analyzes Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, and Apple Ads. 250+ checks with scoring, parallel agents, industry templates, and AI creative generation.
banana
IncludedAI image generation Creative Director powered by Google Gemini Nano Banana models. Use this skill for ANY request involving image creation, editing, visual asset production, or creative direction. Triggers on: generate an image, create a photo, edit this picture, design a logo, make a banner, visual for my anything, and all /banana commands. Handles text-to-image, image editing, multi-turn creative sessions, batch workflows, and brand presets.
rpg-migration-analyzer
IncludedAnalyzes legacy RPG (Report Program Generator) programs from AS/400 and IBM i systems for migration to modern Java applications. Extracts business logic from RPG III/IV/ILE source code, identifies data structures (D-specs), file operations (F-specs), program dependencies (CALLB/CALLP), and converts RPG constructs to Java equivalents. Generates migration reports, complexity estimates, and Java implementation strategies with POJO classes, JPA entities, and service methods. Use when modernizing AS/400 or IBM i legacy systems, analyzing RPG source files (.rpg, .rpgle, .RPGLE), converting RPG to Java, mapping data specifications to Java classes, planning legacy system migration, or when user mentions RPG analysis, Report Program Generator, RPG III/IV/ILE, AS/400 modernization, IBM i migration, packed decimal conversion, or mainframe application rewrite.
brand-library-architect
IncludedBuild a complete brand library for a product — visual asset render pipeline, brand documentation set (BRAND, COPY, MANIFESTO, BIOS, FAQ, GLOSSARY, TONE, PRICING), open-source convention files (README, CONTRIBUTING, SECURITY, CODE_OF_CONDUCT), and a self-contained press kit. This skill should be used when the user asks to "build a brand library / brand kit / press kit / brand assets" for a product, "set up a brand library workflow," "create a positioning manifesto plus visual identity," or any combination of brand documentation + visual asset pipeline. Apply phase-by-phase or run end-to-end. Templates are product-agnostic and use {{TOKEN}} placeholders the skill prompts the user to fill.
writing-tech-post
IncludedAuthors engineering blog posts end-to-end: launch deep-dives, incident postmortems, architecture migrations, performance case studies, tutorials, AI/agent system writeups, security disclosures, and research-to-product translations. Picks the correct archetype, plans the abstraction ladder, enforces an evidence cadence (diagrams, benchmarks, profiles, traces, code, ablations), tunes voice against publisher house styles (Datadog, Vercel, GitHub, AWS, Meta, Cloudflare, Jane Street), and runs a pre-publish gate for narrative momentum and disclosure ethics. Use when drafting a new engineering post, restructuring a draft that feels flat, deciding which evidence form belongs where, validating that depth and product context are balanced, or preparing a postmortem, migration, or performance narrative for external publication. Do not use for API reference documentation, README authoring, marketing copy, release notes, generic SEO content, ghost-written executive thought leadership, or non-engineering long-form essays.
blog-google
IncludedGoogle API integration for blog performance: PageSpeed Insights, CrUX Core Web Vitals with 25-week history, Search Console performance, URL Inspection, Indexing API, GA4 organic traffic, NLP entity analysis for E-E-A-T, YouTube video search for embedding, and Google Ads Keyword Planner. Progressive feature availability based on credential tier (API key, OAuth/service account, GA4, Ads). Shares config with claude-seo at ~/.config/claude-seo/google-api.json. Use when user says "google data", "page speed", "core web vitals", "search console", "indexation", "GA4", "keyword research", "nlp entities", "blog performance", "youtube search", "google api setup".