Detects and redacts PII in inputs and outputs before external actions. Use w hen the user says redact PII, privacy check, or sanitize this. Scans emails, phones, names, addresses. Routes high-risk to hitl-approver. Triggers: reda ct PII, privacy check, sanitize this, remove personal data.
SkillScore100Maintained
Automatic
◆Security & AppSec pack
Last verified 8/15/2026
What it changes
Passed 24 of 24 test cases with the skill, and 5 of 24 without it.
Without skill20%
With skill100%
Checks it passed that the model alone missed
The redacted output uses [SSN].
Karen White is replaced with [NAME].
David Miller is replaced with [NAME].
and 22 more in the full report
20 fixed5 passed either way0 still failing0 broke
Pass-rate lift
+80 pp
Tokens
-26%
Agent turns
0%
Response time
-50%
Model gemini-3.6-flashMeasured 8/15/2026v225 of 25 cases passed with skill · 24 comparable
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 19 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 19
Prompt
Redact the full address from this quote: 'Send billing to 123 Industrial Parkway, Suite 400, Austin TX.'
What was checked, without and with the skill
Checked
Without skill
With skill
The output replaces 123 Industrial Parkway, Suite 400, Austin TX with [ADDRESS].
Missed
Passed
case-18 · gemini-3.6-flash · 8/15/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md36 linessingle file
Privacy Redactor
When to Use
User says redact PII or task matches this capability
User says privacy check or task matches this capability
User says sanitize this or task matches this capability
User says remove personal data or task matches this capability
Workflow
Scan text for PII patterns: email, phone, SSN, address, full names.
Replace with tokens: [EMAIL], [PHONE], [NAME], [ADDRESS].
List redactions in summary for user review.
If external send requested, run hitl-approver after redaction.
Integrations
hitl-approver
whatsapp-auto-responder
memory-sanitizer
Error Handling
Failure
Response
Over-redaction
Preserve structure; only redact confirmed PII.
Missed PII
Run second pass on capitalized tokens and @ symbols.
Gotchas
Never log raw PII to external services after redaction.
Example
Input: User request matching triggers above.
Output: Structured result per workflow with integrations invoked as needed.