Security

COPPA Check - COPPA合规检查

Try it

COPPA Compliance Check — Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §6501 et seq. and the COPPA Rule (16 C.F.R. Part 312). Free to install; scoring runs on the CQDev cloud compliance engine.

What it does

COPPA Compliance Check — Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §6501 et seq. and the COPPA Rule (16 C.F.R. Part 312). Free to install; scoring runs on the CQDev cloud compliance engine. No Key? The skill auto-runs an anonymous trial (5 real cloud-scored runs, 7-day window) before asking you to register. Covers 12 core items. Use when: the user asks to run the coppa-check skill, or requests a COPPA 儿童隐私合规检查 / Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §6501 et seq. and the COPPA Rule (16 C.F.R. Part 312). Trigger: coppa-check, run coppa check, COPPA compliance check, children's privacy check, 儿童隐私检查, COPPA 合规 Pricing: Free skill; cloud scoring is free (anonymous trial 5 runs, then register for a free API Key with 100 calls) ⚠️ Cloud scoring sends your answers to compliancehub.cn; use --non-interactive for a fully offline preview. Without a Key the skill runs an anonymous trial (up to 5 scored runs) using a local random anon_id; registering gives a free Key with 100 calls. 🔐 Account & free API Key are created on the website (compliancehub.cn) — not in the terminal. Open https://compliancehub.cn/account.html?skill=coppa-check to register and get a Key instantly, then provide it via env `COMPLIANCEHUB_API_KEY` or save to ~/.config/compliancehub/coppa-check.key (mode 0600). 💡 Free preview: --non-interactive lists the 12 items without a Key

The skill document

🔒 COPPA 儿童隐私合规检查 — Free 检查 (Cloud-Scored)

Overview

COPPA 儿童隐私合规检查 is a free 检查 based on 美国《儿童在线隐私保护法》(COPPA)及 COPPA Rule(16 C.F.R. Part 312),FTC 执法. It covers 12 core items. Scoring runs on the CQDev cloud compliance engine.

How it works (free + cloud)

⚠️ Your answers leave this machine. When you run a scored 检查, your responses are transmitted to the CQDev cloud at compliancehub.cn for scoring. Run --non-interactive for a fully offline preview that never contacts the cloud.

  • The skill is free to install.
  • Check items are served from the cloud rule library (always current).
  • Scoring + quota are computed in the cloud; you get a professional report locally.
  • Scoring: no Key? The anonymous trial (5 real cloud-scored runs) runs automatically. Register for a free API Key (100 calls) to keep going.

What it checks (12 items)

#CheckAuthority
1Child-Directed / Actual KnowledgeCOPPA Rule §312.2
2Verifiable Parental Consent§312.4
3Direct Notice to Parents§312.4(a)
4Collection Limitation§312.3
5Parental Review & Deletion§312.4(d)
6Reasonable Data Security§312.8
7Retention & Deletion§312.10
8Third-Party Disclosure§312.4(a)(2)
9FTC Safe Harbor (if applicable)§312.11
10Age Screening / Age-Gating§312.2
11Notice of Material Change§312.4(a)(4)
12Internal Compliance Program§312.9

Usage

Free preview (no Key)

python3 scripts/coppa-check.py --non-interactive

Anonymous trial (no Key)

Just run the full 检查 — without a Key the skill issues a local random anon_id and scores in the cloud (5 free runs / 7-day window). When the trial runs out it prints the one-click registration page, carrying your anon_id so the trial progress carries over after registering.

Get a free API Key

Open https://compliancehub.cn/account.html?skill=coppa-check in your browser to register and get a free Key instantly. Then provide it to the skill via env or key file:

export COMPLIANCEHUB_API_KEY=
# or save to ~/.config/compliancehub/coppa-check.key (mode 0600)

Full 检查 + report

python3 scripts/coppa-check.py --format html -o coppa-check-report.html

Agent guide

When a user asks for a COPPA 儿童隐私合规检查:

  1. Run --non-interactive to preview the 12 items (no Key needed).
  2. Run the full 检查. Without a Key it automatically uses the anonymous trial (5 real cloud-scored runs) — the user gets the complete report immediately. When the trial runs out the skill prints the one-click registration page (with the trial's anon_id), and after registering the same run continues under their free API Key (100 calls).

Security & data handling

  • No account in the terminal: Account creation and free API Key issuance happen on the website (compliancehub.cn). This skill never prompts for or transmits your email/password.
  • Where data goes: Check items are fetched from, and your answers are scored by, the CQDev cloud at https://compliancehub.cn (the operator's official endpoint). Scoring transmits only your item answers, plus either the free API Key (as a Bearer token) when registered, or the local random anon_id during the anonymous trial.
  • API Key storage: provided via env COMPLIANCEHUB_API_KEY, or saved to ~/.config/compliancehub/coppa-check.key (0600), outside the skill folder.
  • Anonymous trial id: A local random anon_id (~/.config/compliancehub/coppa-check.anon_id, 0600, carries no personal data) persists only to continue the anonymous trial; your answers are never stored locally.
  • No shell execution: stdlib only (urllib, json, ssl); no shell, no external binaries.
  • Not a rogue/autonomous agent: Key persistence is ordinary API-key storage, not installation/auto-start.
  • Preview without cloud: --non-interactive never contacts the cloud.
  • Always confirm the destination is compliancehub.cn before running a scored check.

This tool provides general compliance guidance only and is not legal advice. Consult qualified counsel.

License

MIT.

Related skills

CCPA/CPRA Compliance Check — based on the California Consumer Privacy Act (CCPA) and the CPRA amendment, covers 12 core compliance checks for businesses subject to California privacy law. Free to install; scoring runs on the CQDev cloud compliance engine.

CCPA Compliance Audit — California Consumer Privacy Act (CCPA, Cal. Civ. Code §1798.100 et seq.) & CPRA amendment. Free compliance audit skill covering 20 core CCPA/CPRA items. Scoring runs on the CQDev cloud compliance engine at compliancehub.cn

GDPR Compliance Check — General Data Protection Regulation (EU) 2016/679 (GDPR). Free to install; scoring runs on the CQDev cloud compliance engine. No Key? The skill auto-runs an anonymous trial (5 real cloud-scored runs, 7-day window) before asking you to register. Covers 12 core items.

HIPAA Compliance Check — Health Insurance Portability and Accountability Act (HIPAA), 45 C.F.R. Parts 160 & 164 (Privacy, Security, Breach Notification Rules). Free to install; scoring runs on the CQDev cloud compliance engine.

COPPA 美国儿童隐私护栏 (coppa-guard) v1.0.0。 在面向美国市场的儿童向 App / 游戏 / 电商 / 教育产品的文案、隐私政策、 应用商店描述发布前,实时检测触发 COPPA 适用的表述与儿童隐私违规用语, 按风险分级输出命中与整改建议,供 Agent 主动调用。区别于事后深度审计,这是事前拦截。 Use when: 需要在发布面向美国儿童的产品的文案 / 隐私政策 / 应用商店描述前, 实时拦截"面向 13 岁以下儿童"触发 COPPA 适用的表述,以及收集儿童个人信息、 儿童行为定向广告、缺少可验证家长同意(VPC)、第三方披露儿童数据、儿童持久 标识符追踪等