How does the skill determine the severity of a finding?

Severity is determined by the sensitivity of the activity being recorded (e.g., health queries vs. basic logins) and the irrefutability of the proof created.

What is the difference between STRIDE Repudiation and LINDDUN Non-repudiation?

STRIDE treats the inability to prove an action as a security threat (Repudiation), while LINDDUN treats the inability for a user to deny a sensitive action as a privacy threat (Non-repudiation).

Which files does this skill typically analyze?

It focuses on audit logging modules, digital signature logic, blockchain integrations, session recording, and compliance-related code.

Does this skill help with GDPR compliance?

Yes, it identifies areas where excessive logging or immutable records may conflict with the 'Right to Erasure' and 'Data Minimization' principles.

Non-Repudiation Privacy Analyzer

Name: Non-Repudiation Privacy Analyzer
Author: florianbuetow

byflorianbuetow

•

보안 및 테스팅

Analyzes source code for privacy risks where excessive accountability and irrefutable logging compromise user plausible deniability.

The Non-Repudiation Privacy Analyzer identifies vulnerabilities where forced accountability creates privacy threats, mapped to the LINDDUN category N. Unlike traditional security models that treat repudiation as a threat, this skill focuses on the privacy inverse: instances where the creation of irrefutable proof regarding sensitive user actions violates privacy by removing plausible deniability. It is particularly useful for auditing systems that handle sensitive queries, whistleblowing, or personal data where the ability to link a specific user to an action could lead to legal or social repercussions. The skill scans for blanket audit logging, mandatory digital signatures, and immutable storage records to ensure compliance with privacy principles like data minimization.

주요 기능

01Maps code patterns to LINDDUN 'N' (Non-repudiation) privacy threats

02Identifies excessive audit logging linking identities to sensitive actions

03Suggests remediations like selective logging and anonymous channel implementation

04Analyzes session recording and tracking mechanisms for identity linking

056 GitHub stars

06Detects privacy risks in digital signatures and immutable blockchain ledgers

사용 사례

01Enforcing GDPR data minimization and right-to-erasure requirements in audit trails

02Auditing health, legal, or whistleblower platforms for privacy compliance

03Reviewing immutable ledger implementations to ensure they don't leak user behavior

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbuetow/claude-code non-repudiation-privacy

For use in Claude.ai and ChatGPT

Download Skill