Managing Consent For Children

What it does

When your agent uses it

• Tasks that involve Privacy and GDPR

Example prompts

• “/managing-consent-for-children”

Requirements

• Python 3

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

1. 1Credit Card Verification: Parent provides credit card details with a micro-transaction (refundable) to verify adult status. Used widely…
2. 2Government ID Verification: Parent uploads government-issued ID (passport, national ID). Must comply with data minimization — ID should be…
3. 3Video Call Verification: Live video call with parent presenting ID. Highest assurance but lowest scalability.
4. 4Digital Identity Systems: eIDAS-compliant electronic identification (e.g., BankID in Nordic countries, SPID in Italy).

What it can do on your machine

Read from SKILL.md and the folder at commit 9b2ef9e. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Ships 1 file in scripts/ (Python), which the agent can run.

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Managing Consent For Children loads about 2.5k tokens when it runs, and up to ~5.7k if it reads all its reference files. Until then it costs about 82 tokens; SKILL.md has 948 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~82

When it runs · the whole SKILL.md, loaded when a task matches

~2.5k

With references · SKILL.md plus every file in references/, read only if the agent opens them

~5.7k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from mukul975/Privacy-Data-Protection-Skills at commit 9b2ef9e, republished under its Apache-2.0 licence (© mukul975). 948 words, ~2,548 tokens.

name

managing-consent-for-children

description

Guide for managing consent for children's personal data under GDPR Article 8 and COPPA. Covers parental consent mechanisms, age verification methods, country-specific age thresholds (ranging from 13 to 16), parental authorization workflows, and age-appropriate design per the UK ICO Children's Code.

license

Apache-2.0

metadata.author

mukul975

metadata.version

1.0

metadata.domain

privacy

metadata.subdomain

consent-management

metadata.tags

children-consent, article-8, coppa, age-verification, parental-consent

START: Child enters date of birth during CloudVault SaaS Inc. sign-up
  │
  ├─► Calculate age based on date of birth
  │
  ├─► Determine applicable age threshold based on country
  │     (e.g., 16 for Ireland/Germany, 13 for UK/Denmark/Belgium)
  │
  ├─► IF age >= threshold:
  │     └─ Proceed with standard consent flow (child can consent independently)
  │
  └─► IF age < threshold:
        │
        ├─► Step 1: Inform child that parental consent is required
        │     "Because you're under [threshold] in [country], we need your
        │      parent or guardian's permission before you can use CloudVault."
        │
        ├─► Step 2: Collect parent/guardian email address
        │     ├─ Validate email format
        │     └─ Ensure parent email differs from child's email
        │
        ├─► Step 3: Send verification email to parent
        │     ├─ Subject: "CloudVault SaaS Inc. — Parental Consent Required"
        │     ├─ Body includes:
        │     │   ├─ What service the child wants to use
        │     │   ├─ What personal data will be collected
        │     │   ├─ Processing purposes (with per-purpose consent options)
        │     │   ├─ Data retention periods
        │     │   ├─ Child's rights under GDPR Article 8
        │     │   ├─ Parent's right to withdraw consent at any time
        │     │   └─ Link to consent form (expires in 48 hours)
        │     └─ Verification link contains: child_id, timestamp, HMAC signature
        │
        ├─► Step 4: Parent clicks verification link
        │     ├─ Display full consent form with per-purpose options
        │     ├─ For high-risk purposes: require credit card micro-transaction
        │     └─ Parent reviews and grants/denies consent per purpose
        │
        ├─► Step 5: Record parental consent
        │     ├─ Parent subject_id (derived from email verification)
        │     ├─ Child subject_id
        │     ├─ Relationship: "parent_guardian"
        │     ├─ Consent decisions per purpose
        │     ├─ Verification method used
        │     ├─ Timestamp, IP address, user agent
        │     └─ Consent text version hash
        │
        ├─► Step 6: Activate child's account
        │     ├─ Enable only purposes for which parental consent was granted
        │     └─ Apply age-appropriate default settings
        │
        └─► Step 7: Ongoing monitoring
              ├─ Age re-verification at appropriate intervals
              ├─ Parent can manage child's consent via parent dashboard
              └─ When child reaches age threshold, transition to self-consent

© mukul975, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 4 other files (scripts, references, assets) in skills/privacy/managing-consent-for-children of mukul975/Privacy-Data-Protection-Skills.

• SKILL.md
• assets/template.md
• references/standards.md
• references/workflows.md
• scripts/process.py

Open the folder on GitHubat commit 9b2ef9e