# Maskara Privacy

> Prevent accidental disclosure of secrets in coding-agent sessions and route cleanup through maskara.

- Skill: `mrgoonie/maskara-privacy` (Agent Skill, multi-file: 5 files)
- Install (CLI): `npx skillmds@latest add mrgoonie/maskara-privacy`
- Raw SKILL.md: https://api.skillmd.com/api/skills/mrgoonie/maskara-privacy/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: mrgoonie (https://skillmd.com/u/mrgoonie)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/mrgoonie/maskara-privacy

---


# Maskara Privacy Skill

Use this skill whenever a task touches secrets, credentials, `.env` files,
agent session logs, shell history, or generated reports that may contain private
values.

Rules:
- Do not print raw secrets.
- Use masked previews only.
- Prefer checking variable names or key presence over reading values.
- Run `maskara scan` before sharing agent logs.
- Run `maskara report` when the user needs rotation guidance.
- Run `maskara` only when the user wants scan, redaction, and report together.
- If redaction finds credentials, advise rotation. Local redaction does not
  revoke secrets already shared with providers.