# Data Security

> Assess data security controls: classification, access, encryption, retention, and exposure risk.

- Skill: `diegosouzapw/data-security` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add diegosouzapw/data-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/diegosouzapw/data-security/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: diegosouzapw (https://skillmd.com/u/diegosouzapw)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/diegosouzapw/data-security

---


# Data Security Review

## Purpose

Evaluate confidentiality and integrity controls for data across storage, transit, and access paths.

## Trigger

- Handling sensitive data in new/changed features.
- Security assessments and release gates.

## Procedure

1. Classify data types and sensitivity levels.
2. Verify at-rest and in-transit encryption controls.
3. Evaluate authentication/authorization boundaries.
4. Check retention, deletion, and auditability requirements.
5. Report exposure risks and remediation priorities.

## Output Contract

- Data security findings with severity and remediation plan.

## Governance Notes

- High/critical findings are merge-blocking unless risk-accepted.

## References

- `agents/security-reviewer.md`
- `skills/review/security/SKILL.md`