# Pii Scan

> Scan content for PII and secrets before writing files, sending messages, or including sensitive data in responses. Use before and after any operation that handles potentially sensitive content.

- Skill: `thedixitjain/pii-scan` (Agent Skill)
- Install (CLI): `npx skillmds add thedixitjain/pii-scan`
- Raw SKILL.md: https://api.skillmd.com/api/skills/thedixitjain/pii-scan/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: thedixitjain (https://skillmd.com/u/thedixitjain)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/thedixitjain/pii-scan

---



Before writing files or after tool calls that produce data, call the `check_output` MCP tool to scan for PII and secrets:

- `connector_type`: `codex.Write` (for file writes), `codex.Bash` (for command output), or the appropriate tool type
- `message`: the text content to scan — for file writes, scan the content being written

**Before file writes:** If the content being written contains PII (SSN, credit card, email, phone, etc.), `check_output` will return a `redacted_message`. Write the redacted version instead of the original, or warn the user that the content contains sensitive data.

**After tool output:** If tool output contains PII, use the `redacted_message` version in your response instead of the original.

If the response shows `allowed: false`, do not write the file or include the output in your response.

Note: For Bash/exec_command tool calls, PII scanning is handled automatically by the PostToolUse hook. This skill covers Write, Edit, and other non-Bash operations where hooks cannot intercept.

---

**Source:** [`hashgraph-online/awesome-codex-plugins`](https://github.com/hashgraph-online/awesome-codex-plugins) → `plugins/getaxonflow/axonflow-codex-plugin/skills/pii-scan/SKILL.md`