provider-privacy-analysis

Audit AI inference providers for data retention, training policies, and gateway routing risks.

Updated May 10, 2026
One-click install
npx skills add https://github.com/cookkie03/skills --skill provider-privacy-analysis-cookkie03
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: provider-privacy-analysis
Source: https://github.com/cookkie03/skills/tree/main/provider-privacy-analysis
Command: npx skills add https://github.com/cookkie03/skills --skill provider-privacy-analysis-cookkie03

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Evaluating whether an AI inference provider trains on your prompts, retains your data, or silently routes requests to third-party hosts requires digging through dense privacy policies and terms of service. This Skill structures that investigation into a repeatable audit covering provider archetype, free-tier privacy discrimination, zero data retention availability, and jurisdiction exposure. ## Core Features & Use Cases - Provider Classification: Identifies whether a platform is a first-party model builder, dedicated inference host, or intermediary gateway forwarding payloads to third parties. - Privacy Matrix Generation: Produces a standardized comparison table covering training-on-payloads defaults, paywalled privacy controls, retention periods, ZDR availability, and data residency. - Opt-Out Action Plans: Delivers step-by-step hardening instructions covering account settings, API parameters, cookie controls, and local self-hosted alternatives. - Use Case: Before adopting a free LLM API tier, run an audit to discover that free-tier prompts are used for training by default, then follow the generated opt-out steps or switch to local GGUF weights. ## Quick Start Audit the privacy and data retention policies of the OpenRouter inference provider and give me the full opt-out action plan.

Frequently Asked Questions about provider-privacy-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if an AI provider trains on my prompts?

Audit the provider's default stance on using prompts, completions, and attachments for model training or fine-tuning. The audit classifies whether training is on by default for free tiers and identifies exact opt-out toggles, API parameters, or settings pages to disable it.

What is gateway passthrough risk in LLM APIs?

Gateway passthrough risk occurs when an intermediary platform routes your requests to external third-party hosts like Together, Fireworks, or AWS Bedrock. Your payloads then fall under disparate third-party terms of service and privacy policies outside your visibility and control.

Do free AI API tiers have worse privacy than paid plans?

Many providers reserve zero data retention, training opt-outs, and DPAs for paid or enterprise tiers while using free-tier prompts for training by default. The audit's tier discrimination analysis identifies exactly which privacy controls are paywalled.

How can I eliminate cloud privacy exposure when using LLMs?

Deploy open-weight models locally using GGUF, MLX, or ONNX formats to bypass cloud tiers entirely. Local execution achieves zero data retention, removes third-party terms exposure, and eliminates foreign surveillance law risks like the US CLOUD Act.

What is zero data retention and which providers offer it?

Zero data retention means prompts and completions are never written to persistent storage, unlike typical 30-day abuse logging. Availability varies by provider and is often restricted to enterprise plans, which the audit's privacy matrix documents per provider.