MonadVault Privacy Sentinel
Overview
Use this skill as a privacy and sovereignty review pass. It identifies leakage, missing consent, scope creep, publication risk, provider exposure, and misleading claims.
This is not legal advice. For legal compliance decisions, recommend qualified review.
Routing
- Use this skill to audit and classify risk, then recommend required changes.
- Use
monadvault-share-capsule-builder to draft the public artifact after privacy blockers are resolved.
- Use
monadvault-vault-memory-curator to turn approved source material into scoped memory candidates.
Review Workflow
- Identify the surface:
- private memory
- Monad configuration
- capability scope
- Share Capsule
- public directory listing
- export
- provider-bound prompt
- Classify the data: personal, confidential, third-party, regulated, sacred/cultural, credential/secret, public, or operational.
- Check exposure path:
- retained in Vault
- visible to a Monad
- sent to an LLM provider
- published in a Share Capsule
- visible to visitors
- included in export
- Review consent and least privilege.
- Assign findings:
Blocker: do not store, send, or publish until fixed.High: serious risk requiring explicit confirmation and mitigation.Medium: fix or disclose before use.Low: clarity or hygiene improvement.
- Provide a revised safer version when useful.
Output Contract
Return:
Decision: clear, conditional, or blockFindingsRequired changesSafer rewrite when applicableConsent questionsResidual risk
Use privacy-review-checklist.md for a systematic pass.
Guardrails
- Do not approve publication of private Vault Memory by implication.
- Treat secrets, credentials, payment data, raw identifiers, and third-party private data as blockers unless the user supplies a valid and narrow reason.
- Prefer explicit wording: say what is private, what is public, and what may be sent to providers.
- Keep the review practical. Do not bury blockers under long general warnings.
1---2name: monadvault-privacy-sentinel3description: Audit MonadVault material for privacy leakage, unsafe sharing, missing consent, excessive access, memory-scope mistakes, provider exposure, and publication risk. Use when a Steward asks whether something is safe to store, remember, send, export, disclose, or publish; requests redaction or a privacy review; or reviews Monad settings, Vault Memory, Share Capsules, public copy, prompts, capability permissions, third-party data, credentials, or sensitive personal information.4---56# MonadVault Privacy Sentinel78## Overview910Use this skill as a privacy and sovereignty review pass. It identifies leakage, missing consent, scope creep, publication risk, provider exposure, and misleading claims.1112This is not legal advice. For legal compliance decisions, recommend qualified review.1314## Routing1516- Use this skill to audit and classify risk, then recommend required changes.17- Use `monadvault-share-capsule-builder` to draft the public artifact after privacy blockers are resolved.18- Use `monadvault-vault-memory-curator` to turn approved source material into scoped memory candidates.1920## Review Workflow21221. Identify the surface:23 - private memory24 - Monad configuration25 - capability scope26 - Share Capsule27 - public directory listing28 - export29 - provider-bound prompt302. Classify the data: personal, confidential, third-party, regulated, sacred/cultural, credential/secret, public, or operational.313. Check exposure path:32 - retained in Vault33 - visible to a Monad34 - sent to an LLM provider35 - published in a Share Capsule36 - visible to visitors37 - included in export384. Review consent and least privilege.395. Assign findings:40 - `Blocker`: do not store, send, or publish until fixed.41 - `High`: serious risk requiring explicit confirmation and mitigation.42 - `Medium`: fix or disclose before use.43 - `Low`: clarity or hygiene improvement.446. Provide a revised safer version when useful.4546## Output Contract4748Return:4950- `Decision`: clear, conditional, or block51- `Findings`52- `Required changes`53- `Safer rewrite` when applicable54- `Consent questions`55- `Residual risk`5657Use [privacy-review-checklist.md](references/privacy-review-checklist.md) for a systematic pass.5859## Guardrails6061- Do not approve publication of private Vault Memory by implication.62- Treat secrets, credentials, payment data, raw identifiers, and third-party private data as blockers unless the user supplies a valid and narrow reason.63- Prefer explicit wording: say what is private, what is public, and what may be sent to providers.64- Keep the review practical. Do not bury blockers under long general warnings.
genezo13