One command to make your website or project secure and legally compliant (Spain + EU). English · Español
/noproblem orchestrates the best open security and privacy skills for Claude Code, adds a deterministic scanner for Spanish/EU law, then fixes what it finds and verifies the result. The goal is zero known violations and no obvious vulnerabilities, plus a short list of the things only a human can do (sign processor agreements, have a lawyer review the texts…).
npx github:dfadify-web/NoProblems
Restart Claude Code, open your project and type /noproblem.
| Phase | What happens |
|---|---|
| 0 · Doctor | Checks that the skills, plugins and MCP it orchestrates are installed |
| 1 · Recon | Deterministic scan: stack, legal pages, 50+ third parties, cookie consent and real blocking, forms, e-commerce, AI, secrets, .env, client-exposed keys, security headers, mixed content, basic a11y. Builds a profile of the owner's real data (never invented) |
| 2 · Agents in parallel | A · Security (owasp-security, /security-review, Trail of Bits differential-review, dependency audit) · B · Data & privacy (compliance-auditor data-flow audit + the relevant privacy-skills) · C · Legal verification (Ansvar MCP / BOE / EUR-Lex: confirms the current text of every article it will cite) |
| 3 · Report | .noproblems/informe-YYYY-MM-DD.md: applicable laws, findings with file:line, legal basis and fix |
| 4 · Fix | Secrets → cookie banner with real blocking → legal pages generated from the real data inventory → form notices → e-commerce (pay button, 14-day withdrawal + withdrawal function, VAT) → AI disclosure → headers → a11y |
| 5 · Verify | verify must end with 0 blocking issues + an independent "legal text vs code" cross-review |
| 6 · Handoff | Before/after score, what was fixed, what's left and who has to do it |
Modes: /noproblem (full) · /noproblem audit (report only) · /noproblem legal · /noproblem security · /noproblem diff · /noproblem status.
GDPR · LOPDGDD · LSSI-CE (legal notice, commercial emails, cookies, e-contracts) · AEPD cookie guide (2023) · TRLGDCU consumer law · Directive (EU) 2023/2673 withdrawal function · Omnibus price/review rules · ODR platform closure (Reg. 2024/3228) · Accessibility Act (Ley 11/2023) · AI Act art. 50 · DSA · whistleblowing (Ley 2/2023). Details and sources in references/legal-es.md.
node ~/.claude/skills/noproblem/bin/noproblem.js scan [dir] [--json]
node ~/.claude/skills/noproblem/bin/noproblem.js laws [dir]
node ~/.claude/skills/noproblem/bin/noproblem.js verify [dir] # exit 1 if blocking issues → usable in CI
node ~/.claude/skills/noproblem/bin/noproblem.js report [dir]
node ~/.claude/skills/noproblem/bin/noproblem.js profile [dir] show|missing|set key=value
node ~/.claude/skills/noproblem/bin/noproblem.js doctor
NoProblems doesn't bundle anyone else's work: the installer fetches each dependency from its original repository, under its own license.
| Dependency | Source | License |
|---|---|---|
| owasp-security skill | agamm/claude-code-owasp | MIT |
| differential-review plugin | trailofbits/skills | CC BY-SA 4.0 |
| privacy-skills-complete plugin | mukul975/privacy-data-protection-skills | Apache 2.0 |
| compliance-auditor skill | FuzulsFriend/compliance-auditor | MIT |
| Ansvar MCP (EU/Spanish legislation) | https://gateway.ansvar.eu/mcp |
service terms of Ansvar |
/security-review |
built into Claude Code | — |
Options: --no-deps (only /noproblem), --uninstall, --uninstall --all (also removes dependencies). The Ansvar MCP needs authentication: run /mcp inside Claude Code.
NoProblems helps you comply and reduces risk, but it is not legal advice and does not replace a lawyer or a professional security audit. Laws change: the skill verifies current text before citing it, but the final responsibility is the site owner's.
npm test (Node 18+): synthetic non-compliant and compliant projects, NIF/CIF validation, CLI and installer.
MIT © dfadify-web