openauditB85out of 100: openaudit's audit of itself
agent.privacy

Privacy & data-protection review

Builds a personal-data inventory and traces its flows — storage, logging, third parties, consent, retention and deletion — against GDPR/CCPA expectations. (agentic, uses Claude)

Engine
Agent
Targets
Codebase, URL
Areas
Privacy, Compliance
Runs
Opt-in: only when selected with --only
Network
Contacts services beyond the target

Run only this auditor

bunx openaudit . --only agent.privacy

Runs a playbook with the Claude Agent SDK. Needs ANTHROPIC_API_KEY or a Claude Code login; host agents can run the same playbook over MCP without a key.

Playbook

Builds a personal-data inventory and traces its flows — storage, logging, third parties, consent, retention and deletion — against GDPR/CCPA expectations.

Host agents fetch it with get_playbook over MCP. How playbooks work