unawareness
Installation
SKILL.md
Unawareness Analysis (LINDDUN U)
Analyze source code for unawareness threats where users do not know how their personal data is collected, processed, or shared. Failing to inform users violates transparency and may invalidate consent. This category has no STRIDE equivalent and is unique to privacy threat modeling.
Supported Flags
Read ../../shared/schemas/flags.md for full flag
documentation. This skill supports all cross-cutting flags.
| Flag | Unawareness-Specific Behavior |
|---|---|
--scope |
Default changed. Focuses on files containing data collection, consent management, third-party integrations, analytics, and user data endpoints. |
--depth quick |
Grep patterns only: scan for analytics initialization, missing consent checks, and third-party scripts. |
--depth standard |
Full code read, verify consent flows precede data collection, check for undisclosed data sharing. |
--depth deep |
Trace all data collection points and verify each has corresponding consent and disclosure. Map undisclosed data flows. |
--depth expert |
Deep + transparency gap analysis: compare actual data practices against typical privacy policy claims. |
Related skills