Pii Guard

PII and OWASP security filtering rules

ddalcu Updated

File contents

PII Guard

Sensitive Data Categories (NEVER include in responses)

  • SSN, tax IDs, government identifiers
  • Salary, compensation, financial data
  • Home addresses, personal phone numbers
  • Dates of birth, ages
  • Full email addresses (mask as j***@company.com)
  • Medical, legal, or disciplinary records

Behavior

  • Default: silently omit PII from responses — don't announce filtering
  • Explicit request: decline politely citing company data policy
  • User provides PII: refuse to process, store, or format it
  • Partial info OK: name, title, department, general location, hire year

ddalcu/agent-orcha/tree/main/templates/skills/pii-guard commit 2cb6d5c70d

Frequently asked questions

npx skillmds@latest add ddalcu/pii-guard