How do I install the Cnil Scanner skill?

Run npx skillmds@latest add thewatcher01/cnil-scanner in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Cnil Scanner safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: executes scripts, makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cnil Scanner?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cnil Scanner free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cnil Scanner?

TheWatcher01 (@thewatcher01) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cnil Scanner by thewatcher01 — Agent Skill

Name: Cnil Scanner
Rating: 4.666666666666667 (3 reviews)
Author: TheWatcher01

Cnil Scanner

Check if a company has declared a DPO (Data Protection Officer) to the CNIL. Use when the user asks about RGPD compliance status of a company, or to identify prospects without a DPO. Companies without a DPO are hot RGPD consulting prospects.

TheWatcher01 c16af27 2 files · 10.3 KB Updated Sep 10, 2026

File contents

cnil-scanner

Check DPO (Data Protection Officer) declarations in the CNIL open data registry.

Triggers

/cnil 424761419
/cnil OVH
"cette entreprise a-t-elle un DPO?"
"qui n'a pas de DPO dans le 31?"
"verifier la conformite RGPD de X"

How it works

Queries the CNIL DPO declaration dataset published on data.gouv.fr via the tabular API. No authentication required.

API endpoint: https://tabular-api.data.gouv.fr/api/resources/0651b990-9d0f-404e-8aee-9f3a7755eedb/data/

Critical use case

Companies WITHOUT a declared DPO are hot RGPD consulting prospects. Any company processing personal data at scale is legally required to have a DPO (RGPD Art. 37). This skill identifies non-compliant companies for targeted prospecting.

Usage

python3 {baseDir}/scripts/cnil.py --query "424761419" --format json
python3 {baseDir}/scripts/cnil.py --query "OVH" --format text
python3 {baseDir}/scripts/cnil.py --query "424761419" --format json

Arguments

Argument	Required	Default	Description
`--query`	yes		SIREN number (9 digits) or company name
`--department`	no		Filter by department code (postal code prefix)
`--format`	no	json	Output format: `json` or `text`

Output fields

has_dpo — boolean, whether a DPO declaration was found
organism_name — name of the declaring organization
siren — SIREN number
dpo_name — DPO name (if publicly available)
declaration_date — date of DPO declaration
postal_code — postal code of the organization
prospect_signal — "HOT" if no DPO found, "COLD" if DPO declared

RGPD compliance note

This skill only uses publicly available open data from the CNIL registry. No personal data is collected or stored. DPO declarations are public by design (RGPD Art. 37(7)).

---name: cnil-scannerdescription: Check if a company has declared a DPO (Data Protection Officer) to the CNIL. Use when the user asks about RGPD compliance status of a company, or to identify prospects without a DPO. Companies without a DPO are hot RGPD consulting prospects.---# cnil-scannerCheck DPO (Data Protection Officer) declarations in the CNIL open data registry.## Triggers- `/cnil 424761419`- `/cnil OVH`- "cette entreprise a-t-elle un DPO?"- "qui n'a pas de DPO dans le 31?"- "verifier la conformite RGPD de X"## How it worksQueries the CNIL DPO declaration dataset published on data.gouv.fr via the tabular API. No authentication required.API endpoint: `https://tabular-api.data.gouv.fr/api/resources/0651b990-9d0f-404e-8aee-9f3a7755eedb/data/`## Critical use case**Companies WITHOUT a declared DPO are hot RGPD consulting prospects.** Any company processing personal data at scale is legally required to have a DPO (RGPD Art. 37). This skill identifies non-compliant companies for targeted prospecting.## Usage```bashpython3 {baseDir}/scripts/cnil.py --query "424761419" --format jsonpython3 {baseDir}/scripts/cnil.py --query "OVH" --format textpython3 {baseDir}/scripts/cnil.py --query "424761419" --format json```## Arguments| Argument | Required | Default | Description ||----------------|----------|---------|----------------------------------------------|| `--query` | yes | | SIREN number (9 digits) or company name || `--department` | no | | Filter by department code (postal code prefix) || `--format` | no | json | Output format: `json` or `text` |## Output fields- `has_dpo` — boolean, whether a DPO declaration was found- `organism_name` — name of the declaring organization- `siren` — SIREN number- `dpo_name` — DPO name (if publicly available)- `declaration_date` — date of DPO declaration- `postal_code` — postal code of the organization- `prospect_signal` — "HOT" if no DPO found, "COLD" if DPO declared## RGPD compliance noteThis skill only uses publicly available open data from the CNIL registry. No personal data is collected or stored. DPO declarations are public by design (RGPD Art. 37(7)).

Frequently asked questions