How do I install the Pii Scan skill?

Run npx skillmds add thedixitjain/pii-scan in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Pii Scan skill do?

Scan content for PII and secrets before writing files, sending messages, or including sensitive data in responses. Use before and after any operation that handles potentially sensitive content. It is listed under Coding & Dev Tools on SkillMD.

Is Pii Scan safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Pii Scan?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Pii Scan free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Pii Scan?

thedixitjain (@thedixitjain) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Pii Scan by thedixitjain — Agent Skill

Name: Pii Scan
Rating: 4.2 (5 reviews)
Author: thedixitjain

File contents

Before writing files or after tool calls that produce data, call the check_output MCP tool to scan for PII and secrets:

connector_type: codex.Write (for file writes), codex.Bash (for command output), or the appropriate tool type
message: the text content to scan — for file writes, scan the content being written

Before file writes: If the content being written contains PII (SSN, credit card, email, phone, etc.), check_output will return a redacted_message. Write the redacted version instead of the original, or warn the user that the content contains sensitive data.

After tool output: If tool output contains PII, use the redacted_message version in your response instead of the original.

If the response shows allowed: false, do not write the file or include the output in your response.

Note: For Bash/exec_command tool calls, PII scanning is handled automatically by the PostToolUse hook. This skill covers Write, Edit, and other non-Bash operations where hooks cannot intercept.

Source: hashgraph-online/awesome-codex-plugins → plugins/getaxonflow/axonflow-codex-plugin/skills/pii-scan/SKILL.md

Frequently asked questions