gpp-audit-compare

Compare CMP IDs, GPP strings, and cookie architectures across websites via Chrome Incognito postMessage pings.

Updated Feb 23, 2026
One-click install
npx skills add https://github.com/phillymedia/eng-ai-skills --skill gpp-audit-compare
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gpp-audit-compare
Source: https://github.com/phillymedia/eng-ai-skills/tree/main/.claude/skills/gpp-audit-compare
Command: npx skills add https://github.com/phillymedia/eng-ai-skills --skill gpp-audit-compare

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams validate and compare Global Privacy Platform (GPP) signals across multiple websites, revealing CMP providers, opt-out postures, MSPA fields, cookie architectures, and section data.

Core Features & Use Cases

  • Parallel GPP ping and section data collection across sites
  • CMP provider and US region detection, opt-out posture analysis, and MSPA field extraction
  • Cookie architecture mapping and banner state detection
  • Generate a structured, cross-site comparison report

Quick Start

Run the gpp-audit-compare against multiple sites to retrieve GPP ping, section data, and cookie signals in parallel.

Frequently Asked Questions about gpp-audit-compare

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit and compare GPP signals across multiple websites?▼

To audit and compare GPP signals across multiple websites, you can run a parallel Chrome Incognito postMessage ping to retrieve CMP IDs, USNAT section data, and cookie architectures. This generates a structured cross-site comparison report detailing opt-out postures and MSPA fields.

What is a GPP string and how do I check its opt-out posture?▼

A GPP string encodes Global Privacy Platform signals, including USNAT and MSPA opt-out fields. You can check its posture by performing a postMessage ping to collect and parse the section data, revealing the site's consent state and provider configuration.

How do I detect which CMP provider a website is using?▼

You can detect which CMP provider a website is using by executing a Chrome Incognito postMessage ping to collect the site's GPP status and section data. The parsed signals reveal the specific CMP ID alongside the site's cookie architecture.

Can I extract MSPA fields and cookie architectures for USNAT compliance checks?▼

Yes, you can extract MSPA fields and cookie architectures for USNAT compliance checks by applying a GPP signal audit to a set of URLs. This process collects parsed section data, cookie names, and banner states for cross-site comparison.

Does this GPP signal audit work with multiple URLs in parallel?▼

Yes, this GPP signal audit works with multiple URLs in parallel, collecting postMessage ping responses and USNAT section data simultaneously. It applies to a set of domains to compare CMP IDs, opt-out fields, and cookie architectures efficiently.

What is the best way to compare cross-site privacy banner states and consent configurations?▼

The best way to compare cross-site privacy banner states and consent configurations is to run a parallel GPP signal audit across target URLs. This collects CMP provider data, parsed GPP strings, and cookie names into a concise cross-site comparison report.