compliance-testing
把技术合规检查自动化，能及时发现因部署或第三方变更导致的违规点。
可能需访问生产页面和用户数据，注意隐私与合规性限制
自动检测 GDPR/CCPA、同意流、脚本阻断与 cookie 清单等合规性技术问题。
自动检测网站的合规性技术问题：检查 GDPR/CCPA 的同意流、脚本在用户同意前是否被阻断、Cookie 清单、GPC 和 Consent Mode v2 等细节。适合上线前或定期审计时跑一遍技术层面的合规检查，能抓到那种只要一个 analytics cookie 就算违规的问题。特点是把合规变成可复现的技术测试，能发现代码回归带来的合规漏洞。
▸ 展开 SKILL.md 英文原文
Test for regulatory compliance: GDPR/CMP consent verification, Google Consent Mode v2, Global Privacy Control (GPC), CCPA/US state opt-out, EU AI Act Article 50 transparency, Better Ads Standards, and cookie-inventory auditing. Covers automated consent-flow testing, third-party script blocking before consent, and cookie drift detection. Use when: "GDPR test," "compliance," "CMP test," "cookie consent," "consent mode," "CCPA," "GPC," "AI Act," "Better Ads," "privacy banner." Not for: WCAG/axe-core test authoring — use accessibility-testing. Not for: OWASP/vuln scanning — use security-testing. Not for: evaluating your LLM feature's quality or safety — use ai-system-testing. Related: accessibility-testing, security-testing, ai-system-testing, ci-cd-integration.
帮我安装这个 skill：https://raw.githubusercontent.com/petrkindlmann/qa-skills/main/skills/compliance-testing/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/petrkindlmann/qa-skills/main/skills/compliance-testing/SKILL.md"<objective> Compliance is binary: a single analytics cookie that fires before consent, or a "Reject all" rendered as a tiny grey link, is a violation no matter how polished the rest of the flow looks. Manual quarterly audits miss the regression a developer shipped on a Tuesday. This skill automates the technical checks — consent state, script blocking, cookie attributes, GPC, Consent Mode v2, AI Act disclosure — so configuration drift fails CI instead of a regulator's inbox. </objective> ## Discovery Questions First, check for `.agents/qa-project-context.md` in the project root — it carries applicable regulations, CMP details, ad networks, and geographic scope. Skip any question already an