legal-baseline
Installation
SKILL.md
Legal baseline
Four parts for every public website the team runs:
| Part | File in the site | Basis |
|---|---|---|
| Provider identification | legal/impressum.md, linked from every page |
§ 5 DDG (Germany) |
| Privacy information | legal/privacy.md, linked from every page |
GDPR Art 13 |
| Security contact | /.well-known/security.txt |
RFC 9116 |
| No third-party requests on page load | every HTML page | GDPR Art 5(1)(c), Art 6(1) |
The skill writes skeletons and checks. The content of the Impressum and the privacy page needs review by legal counsel before the site goes live.
Inputs
- The site: its source folder, how it is built and the folder the build writes (the site root that the host serves).
- The provider: a person or a company, with address, contact, register entry and VAT ID where they exist.
- What the site processes: server logs at the host, forms, email, cookies or local storage, embedded content, analytics.
- The security contact: an email address or an https form that the team reads, and who renews
Expires.