doubao-personal-info-audit

Conducts China personal information protection compliance audits and generates Word reports and Excel workpapers.

2|Updated Aug 9, 2026
One-click install
npx skills add https://github.com/DeepJH/doubao-skill-and-info --skill doubao-personal-info-audit-deepjh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: doubao-personal-info-audit
Source: https://github.com/DeepJH/doubao-skill-and-info/tree/main/skills/doubao-personal-info-audit
Command: npx skills add https://github.com/DeepJH/doubao-skill-and-info --skill doubao-personal-info-audit-deepjh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve? It guides a full China personal information protection compliance audit, from trigger assessment and evidence registration through fact analysis, rule mapping, risk evaluation, and remediation, producing traceable Word audit reports and Excel workpapers. ## Core Features & Use Cases - Audit Trigger & Grading: Determines whether statutory audit obligations apply (processing scale, minors, security incidents, regulator orders) and classifies deliverables from L0 legal research to L4 regulator-mandated audits. - 11-Step Evidence-to-Remediation Chain: Enforces a traceable E→F→U→D→A→RO→SC→NR→C→RK→RM analysis chain with numbered evidence, facts, uncertainties, data classification, processing activities, legal roles, scenarios, rules, conclusions, risks, and remediation. - 26-Module 107-Item Checklist: Evaluates all audit points from the Personal Information Protection Compliance Audit Measures, with special modules for AI, facial recognition, minors, cross-border transfer, and automated decision-making. - Use Case: A company processing over 10 million users' data needs its biennial statutory audit; the skill collects evidence, maps applicable laws, evaluates all 107 items, and outputs a formal DOCX report plus XLSX workpapers. ## Quick Start Ask the assistant to determine whether your organization triggers a personal information protection audit obligation and then start the audit for your product.

Frequently Asked Questions about doubao-personal-info-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I determine if my company needs a personal information protection audit in China?

The skill assesses triggers based on processing scale, minors' data, and security incidents. Processing over 10 million individuals' information requires an audit at least every two years under the Compliance Audit Measures, while handling minors' information requires annual audits.

What does the 26-module 107-item audit checklist cover?

It covers all audit points from the Personal Information Protection Compliance Audit Measures, including consent, notification, sensitive information, minors, cross-border transfer, automated decision-making, deletion rights, security measures, and large platform obligations. Each of the 107 items gets an individual conclusion with evidence and legal basis.

What outputs does the personal information audit skill generate?

It generates a formal Word audit report following a six-task structure and Excel workpapers with 16 worksheets, including evidence catalogs, fact-uncertainty tables, the 107-item checklist, and an 11-step traceability matrix. Python scripts validate the analysis chain, citations, and document formatting.

Does the audit skill handle AI and facial recognition scenarios?

Yes, it includes a dedicated high-risk scenario module for AI training, RAG, inference, generative content labeling, anthropomorphic interaction, facial recognition, and automated decision-making. These findings are written back into the main analysis chain rather than treated as isolated conclusions.

What are the limitations of the audit conclusions?

Conclusions are limited to five grades: compliant, partially compliant, non-compliant, unable to determine, or not applicable. Not-applicable requires positive exclusion evidence, and outputs are lawyer-review drafts that do not replace professional legal judgment.