contribute-broker — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited contribute-broker (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Skill for AI agents (Claude Code, OpenClaw, Cursor, etc.)
When you discover a data broker that is not in the Symaira EraseMe registry, use this workflow to contribute it back via a Pull Request.
Use this skill when:
# Search by name
grep -ri "<broker_name>" registry/brokers/
# Or use the broker ID pattern
ls registry/brokers/us/ | grep -i "<partial_name>"If the broker exists, skip to step 5 (Update existing).
Collect the following REQUIRED fields:
Create a new file at registry/brokers/<jurisdiction>/<broker-id>.yaml:
id: <broker-id>
name: <Full Legal Name>
website: https://<website>
category: <category>
jurisdictions:
- <country_code>
laws:
- <law>
data_sensitivity: 3
priority: medium
added_date: '<YYYY-MM-DD>'
status: active
source: '<Where you found this broker>'
opt_out:
- type: email
endpoint: <[email protected]>
template: <ccpa-deletion|gdpr-art17>
locale: <en|de|...>
required_fields:
- full_name
- email
supports_suppression: true
expected_response_days: <45|30>
verification:
ack_keywords:
- received
- request
rejection_keywords:
- cannot
- denied
human_required_keywords:
- verify
- identification# Install dependencies if needed
pip install pyyaml jsonschema
# Validate
python scripts/registry_sync.py --validate-all# Create a feature branch
git checkout -b add-broker-<broker-id>
# Stage and commit
git add registry/brokers/<jurisdiction>/<broker-id>.yaml
git commit -m "registry: add <Broker Name> data broker
- Source: <where you found it>
- Jurisdiction: <country>
- Opt-out: <email|web_form>"
# Push and create PR
git push -u origin add-broker-<broker-id>
gh pr create --fill --title "registry: add <Broker Name>" --body "..."If the broker exists but information is outdated:
# Edit the existing file
# Update only the changed fields
# Add a note about what changed
# Validate
python scripts/registry_sync.py --validate-all
# Commit with descriptive message
git add registry/brokers/<jurisdiction>/<existing-id>.yaml
git commit -m "registry: update <Broker Name> opt-out email
Old: [email protected]
New: [email protected]
Source: <where you verified this>"source field must reference where you found the broker--validate-all to ensure schema compliance# User mentions: "I found this broker called DataMax LLC"
# 1. Check if it exists
grep -ri "datamax" registry/brokers/
# Result: Not found
# 2. Research
curl -s "https://datamax.example.com/privacy" | grep -i "opt.out\|delete\|remove"
# Found: [email protected]
# 3. Create YAML
cat > registry/brokers/us/datamax-us.yaml << 'EOF'
id: datamax-us
name: DataMax LLC
website: https://www.datamax.example.com
category: marketing
jurisdictions:
- US
laws:
- CCPA
data_sensitivity: 3
priority: medium
added_date: '2025-05-21'
status: active
source: 'Company privacy page'
opt_out:
- type: email
endpoint: [email protected]
template: ccpa-deletion
locale: en
required_fields:
- full_name
- email
supports_suppression: true
expected_response_days: 45
verification:
ack_keywords:
- received
- request
rejection_keywords:
- cannot
- denied
human_required_keywords:
- verify
EOF
# 4. Validate
python scripts/registry_sync.py --validate-all
# 5. Create PR
git checkout -b add-broker-datamax
git add registry/brokers/us/datamax-us.yaml
git commit -m "registry: add DataMax LLC data broker"
git push -u origin add-broker-datamax
gh pr create --fill| Category | Description |
|---|---|
| people-search | Sites that aggregate personal info (Spokeo, Whitepages) |
| marketing | Email/phone list brokers, ad tech |
| credit | Credit bureaus, financial data |
| analytics | Data analytics, market research |
| background-check | Employment/criminal background checks |
| social-media | Social media platforms |
| other | Everything else |
| Code | Region |
|---|---|
| US | United States |
| DE | Germany |
| EU | European Union |
| UK | United Kingdom |
| CA | Canada |
| BR | Brazil |
| Law | Region |
|---|---|
| GDPR | EU/EEA |
| CCPA | California |
| CPRA | California (updated) |
| LGPD | Brazil |
| PIPEDA | Canada |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.