valdi

Validate scanning code and consent against Danish law and GDPR.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/stanz-stanz/heimdall --skill valdi-stanz-stanz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: valdi
Source: https://github.com/stanz-stanz/heimdall/tree/main/.claude/agents/valdi
Command: npx skills add https://github.com/stanz-stanz/heimdall --skill valdi-stanz-stanz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Valdí enforces legal and GDPR compliance for Heimdall's scanning pipeline by preventing unauthorized or high-risk scans and providing an auditable approval workflow.

Core Features & Use Cases

  • Scan-type validation (Gate 1): Review scanning functions, classify activities by Layer, verify allowed tools and paths, and issue UUID approval tokens or structured rejection reports with forensic logs.
  • Per-target authorisation (Gate 2): Validate per-target consent, confirm domain scope and token validity, check robots.txt, and block scans that lack current written consent.
  • Forensic audit trail: Produce immutable, timestamped logs for every approval, rejection, or pre-scan check and maintain registries in data/valdi and data/scan_types.json for automated enforcement.
  • Use Case: Before running a batch of prospecting scans, run Valdí to filter domains by robots.txt, confirm approval tokens, and write pre-scan compliance records.

Quick Start

Ask Valdí to validate a new scanning function for Layer classification and produce a forensic approval log.

Frequently Asked Questions about valdi

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate scanning activities against GDPR and Danish law?

GDPR scan validation involves checking code and consent state against regulations like Straffeloven §263. A legal gatekeeper reviews scanning functions, verifies robots.txt rules, and issues UUID approval tokens to ensure authorized compliance before probes execute.

What is a pre-scan authorisation check and when do I need it?

A pre-scan authorisation check validates per-target consent, confirms domain scope, and checks robots.txt compliance before executing probes. You need it to block unauthorized scans and maintain an auditable forensic log of consent verification.

How do I generate forensic logs for scan approvals and rejections?

Forensic logs for scan approvals are generated by validating scanning functions and producing immutable, timestamped records for every decision. The system maintains registries of active approval tokens and structured rejection reports to ensure an auditable compliance trail.

Can I use a legal compliance gatekeeper for passive and active network probes?

Yes, a legal compliance gatekeeper supports both passive and active network probes. It applies per-target authorisation checks, verifies function hashes, and blocks scans that lack valid written consent or fail robots.txt compliance checks.

Why are my automated scans being blocked without valid consent?

Automated scans are blocked without valid consent to enforce GDPR and Straffeloven §263 compliance. The gatekeeper requires a current UUID approval token, verifies domain scope, and checks robots.txt rules before authorising any scanning activity.

Does scan validation check robots.txt and function hashes before authorising targets?

Yes, scan validation checks robots.txt compliance and verifies function hashes before authorising targets. It filters domains by robots.txt rules, confirms approval token validity, and writes pre-scan compliance records to ensure legally authorized scanning.