Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BuilderCed/agent-skills --skill data-sovereignty-patternsgit clone --depth 1 https://github.com/BuilderCed/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/builderced/agent-skills/data-sovereignty-patterns)<a href="https://agentmods.dev/skills/builderced/agent-skills/data-sovereignty-patterns"><img src="https://agentmods.dev/badge/skills/builderced/agent-skills/data-sovereignty-patterns/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/builderced/agent-skills/data-sovereignty-patterns"><img src="https://agentmods.dev/badge/skills/builderced/agent-skills/data-sovereignty-patterns.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.01123 |
| Opus 5.5 | $0.00016 | $0.00449 |
| Sonnet 5.5 | $0.00008 | $0.00225 |
| Haiku 4.5 | $0.00004 | $0.00112 |
Grade A, and why
data-sovereignty-patterns scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 121 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Data Sovereignty Patterns
DISCLAIMER: Guidance only. Cross-border data transfers require legal assessment specific to your situation.
When to Use
- Choosing cloud providers (data residency requirements)
- Using AI APIs that process data outside the EU
- Designing data architecture for multi-region deployments
- Assessing compliance for international data flows
- Responding to data localization requirements
EU → Non-EU Transfer Mechanisms
After Schrems II (CJEU C-311/18), transferring personal data outside the EEA requires:
1. Adequacy Decisions (Easiest)
Countries deemed adequate by the European Commission:
| Country | Decision Date | Notes |
|---|---|---|
| UK | 2021 (renewed) | Post-Brexit, includes sunset clause |
| Japan | 2019 | Mutual adequacy |
| South Korea | 2022 | Comprehensive |
| USA | 2023 (EU-US DPF) | Data Privacy Framework, requires self-certification |
| Canada | 2001 | Commercial only (PIPEDA) |
| Switzerland | 2000 | Comprehensive |
| Israel | 2011 | Comprehensive |
| New Zealand | 2012 | Comprehensive |
| Argentina | 2003 | Comprehensive |
| Uruguay | 2012 | Comprehensive |
For adequate countries: transfer freely, no additional mechanism needed.
2. Standard Contractual Clauses (SCCs)
For non-adequate countries, use EU-approved SCC templates:
| Module | Scenario |
|---|---|
| Module 1 | Controller → Controller |
| Module 2 | Controller → Processor (most common: you → cloud provider) |
| Module 3 | Processor → Sub-processor |
| Module 4 | Processor → Controller |
Required: Transfer Impact Assessment (TIA) evaluating recipient country laws.
3. Binding Corporate Rules (BCRs)
For intra-group transfers within multinational companies. Complex, expensive, long approval (~18 months).
Data Localization by Region
| Region | Requirement | Affected Data |
|---|---|---|
| EU/EEA | Transfer mechanism required for export | Personal data (GDPR) |
| Russia | Localization of Russian citizens' data | Personal data |
| China | Security assessment for cross-border transfers | Personal data + "important data" |
| India | Proposed localization (DPDP Act 2023) | Sensitive personal data |
| Brazil | Similar to GDPR (LGPD) | Personal data, adequacy or SCCs |
| Saudi Arabia | Localization for certain sectors | Government, health, finance |
| Turkey | Explicit consent or BCR for transfers | Personal data |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 121 lines · 40 tokens per session scan A 7e279a237009
data-sovereignty-patterns is a skill published in the GitHub repository BuilderCed/agent-skills (2 stars, last pushed 6mo ago), licensed MIT. It adds 40 tokens to every session and 1,123 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
deutsch-englisch-digitale-inhalte-handbuch
Für Deutsch Englisch AGB: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Schnittstellenkarte mit Zuständigkeits- und Nachweisfragen. Fachgebiet: AGB-Recht-Prüfer. Route: deutsch-englisch-digitale-inhalte-handbuch.
deutsch-englisch-agb
Für Deutsch Englisch AGB: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Schnittstellenkarte mit Zuständigkeits- und Nachweisfragen. Fachgebiet: AGB-Recht-Prüfer. Route: deutsch-englisch-agb.
region-config
Configure a brand region: timezone, currency, compliance regimes, holidays. "set up the Japan market".
linkfox-zhihuiya-abstract-data-translated
A patent-database tool that retrieves translated patent titles and abstracts from Zhihuiya (PatSnap). It can provide these short descriptions in Chinese, English, or Japanese for patents identified by ID or publication number.
linkfox-zhihuiya-claim-data-translated
A patent-database tool for retrieving translated patent claims from Zhihuiya (PatSnap). Patent claims define the legal scope of protection, and the tool can return them in Chinese, English, or Japanese.
privacy-global-jp
A document generator for Korean services that also serve people in Japan. It creates Korean and Japanese privacy policies and terms of service while reflecting relevant rules in both countries.