How does the skill detect if it is relevant to my code?

It performs a pre-flight check for PII patterns, user data identifiers, and third-party tracking scripts before running the full analysis to avoid false positives in non-data-sensitive code.

What is the difference between LINDDUN and STRIDE?

While STRIDE focuses on security threats like spoofing and tampering, LINDDUN focuses specifically on privacy threats like linkability and identifiability that can occur even in technically secure systems.

Can I run checks for specific privacy categories only?

Yes, you can use the --only flag to target specific categories like Linkability (L), Data Disclosure (D2), or Non-compliance (N2).

Does this skill handle regulatory compliance?

Yes, it maps findings to specific articles in the GDPR, CCPA, and HIPAA to help developers and compliance officers understand legal implications.

LINDDUN Privacy Threat Analysis

Name: LINDDUN Privacy Threat Analysis
Author: florianbuetow

byflorianbuetow

•

安全与测试

Automates comprehensive privacy threat modeling using the LINDDUN framework to identify data protection risks and regulatory gaps.

This skill provides a systematic approach to privacy engineering by dispatching seven specialized subagents to analyze codebases for the LINDDUN threat categories: Linkability, Identifiability, Non-repudiation, Detectability, Data Disclosure, Unawareness, and Non-compliance. It bridges the gap between standard security frameworks like STRIDE and specific privacy requirements such as GDPR, CCPA, and HIPAA. By identifying privacy-specific vulnerabilities like re-identification risks, hidden data flows, and insufficient consent mechanisms, it ensures that systems remain compliant and respect user data even when technical security measures are already in place.

主要功能

01Parallel dispatch of 7 specialized privacy subagents for comprehensive coverage

02Context-aware relevance checking for PII, analytics, and third-party data patterns

03Cross-framework correlation with OWASP Top 10, CWE, and STRIDE categories

046 GitHub stars

05Automatic mapping to GDPR, CCPA, and HIPAA regulatory articles

06Automated fix suggestions for identified privacy vulnerabilities and data leaks

使用场景

01Auditing codebases for GDPR or CCPA compliance before production deployment

02Conducting automated Privacy Impact Assessments (PIA) for new feature releases

03Identifying hidden PII leakage in application logs and telemetry integrations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbuetow/claude-code linddun

For use in Claude.ai and ChatGPT

Download Skill