What problem does it solve? Privacy, zero-knowledge, and E2EE audits often start without clear scope, authorization boundaries, or an inventory of available evidence, leading to unfocused testing and unsupported conclusions. This Skill structures the intake phase so every claim, data class, flow, and artifact is captured before analysis begins. ## Core Features & Use Cases - Scoped Audit Planning: Converts privacy claims from policies, app store disclosures, and whitepapers into testable audit questions with explicit in-scope and out-of-scope boundaries. - Machine-Readable Manifest: Produces an audit-manifest.json validated against a JSON Schema, with stable IDs linking claims, data classes, flows, evidence requests, limitations, and failure signals. - Refusal and Limitation Handling: Records authorization gaps, partial evidence, and unsafe request conditions early, and recommends the next privacy-audit skills based on risk. - Use Case: A team claims their app is end-to-end encrypted. Use this Skill to inventory the claims, map available network captures and source code to those claims, and generate a manifest that hands off to crypto and network analysis skills. ## Quick Start Ask the agent to plan a privacy audit for your app by scoping the E2EE claims and producing an audit-manifest.json from the evidence you have available.
