Maskara Privacy Skill
Use this skill whenever a task touches secrets, credentials, .env files,
agent session logs, shell history, or generated reports that may contain private
values.
Rules:
- Do not print raw secrets.
- Use masked previews only.
- Prefer checking variable names or key presence over reading values.
- Run
maskara scanbefore sharing agent logs. - Run
maskara reportwhen the user needs rotation guidance. - Run
maskaraonly when the user wants scan, redaction, and report together. - If redaction finds credentials, advise rotation. Local redaction does not revoke secrets already shared with providers.