What types of personal data can OTTO detect?

OTTO identifies various forms of Personally Identifiable Information (PII) including Social Security Numbers, national IDs, emails, phone numbers, and unencrypted sensitive data like passwords or API tokens.

Can OTTO analyze my database queries for privacy?

Yes, OTTO specifically looks for 'SELECT *' patterns and API responses that return unnecessary user data, helping you adhere to the GDPR principle of data minimization.

How does OTTO help prevent GDPR fines?

It flags violations of specific GDPR articles (such as Art. 5, 6, and 32) and calculates potential financial risks, providing immediate code fixes to bring your project into compliance before deployment.

Is OTTO only for European GDPR compliance?

While OTTO is named after GDPR articles, its logic effectively covers LGPD (Brazil) and other global privacy frameworks that require PII protection, consent for tracking, and secure data handling.

OTTO GDPR Privacy Guardian

Name: OTTO GDPR Privacy Guardian
Author: metricasboss

bymetricasboss

•

安全与测试

Automates GDPR and LGPD compliance audits by detecting personal data exposure and privacy violations in source code.

OTTO is a specialized privacy guardian for Claude Code designed to identify and mitigate risks related to EU 2016/679 (GDPR) and global privacy regulations. It scans your codebase for hardcoded PII like SSNs and emails, improper logging of sensitive user objects, tracking implementations lacking consent verification, and database queries that violate data minimization principles. By providing real-time analysis, mapping violations to specific legal articles, and offering immediate code refactoring suggestions, OTTO helps developers avoid astronomical fines—up to €20M or 4% of annual turnover—while maintaining a high standard of data security.

主要功能

01Financial risk calculation based on GDPR Art. 83 fine frameworks

0211 GitHub stars

03Data minimization analysis for SQL queries and API response structures

04Consent verification auditing for tracking, analytics, and cookies

05Automatic PII detection for SSNs, emails, and phone numbers in code and logs

06Contextual code fixes with educational explanations of legal requirements

使用场景

01Auditing legacy codebases for hardcoded personal data before cloud migration

02Ensuring new analytics and tracking features include mandatory consent checks

03Preventing sensitive PII leakage into application logs and monitoring tools

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add metricasboss/otto gdpr

For use in Claude.ai and ChatGPT

Download Skill