← Back to Skills Marketplace
TrustBoost PII Sanitizer
by
teodorofodocrispin-cmyk
· GitHub ↗
· v2.0.3
· MIT-0
135
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install trustboost-pii-sanitizer
Description
Sanitizes PII from text before sending to LLMs. Use when handling user-generated text that may contain sensitive data, when privacy compliance is required (G...
Usage Guidance
This skill appears to do what it says (remote PII sanitization), but before installing: 1) Confirm the operator and endpoint (api.trustboost.dev / GitHub repo) are legitimate and review their privacy policy and audit report. 2) Ask for technical details on how 'raw input is never stored' is enforced (encryption, retention, access controls, and whether any raw content is processed in logs or backups). 3) Clarify the TRIAL mechanism: how is a wallet tied to 'TRIAL' without sending a signed transaction, and what information you must send that could deanonymize users? 4) Never supply production private keys; if autonomous payments are used, test only with ephemeral wallets and insist on client-side signing so the service never receives your private key. 5) For strict no-transmission environments (HIPAA, on-prem), use a local sanitizer — this skill transmits raw text to a third party. If these questions are unanswered or you cannot accept outbound transmission of user data, treat the skill as unsuitable.
Capability Tags
Capability Assessment
Purpose & Capability
The skill claims to be a remote PII sanitizer and its instructions require sending text to the TrustBoost API — this is coherent with the stated purpose. Minor mismatch: the SKILL.md metadata version is 2.0.2 while the registry lists 2.0.3 (likely benign but should be consistent).
Instruction Scope
Runtime instructions explicitly instruct the agent to transmit raw input text to https://api.trustboost.dev/sanitize and to include a Solana tx_hash. Sending raw text to a third-party service is expected for a hosted sanitizer, but the doc also repeatedly asserts 'raw input text is never stored' without describing technical controls (e.g., encryption at rest, retention policies, or how Supabase/trial logic prevents accidental persistence). The instructions also discuss signing Solana transactions and autonomous payments — that requires access to a wallet private key (sensitive) and the doc doesn't fully explain how wallets are authenticated for the TRIAL mode or how tx_hash='TRIAL' is validated per-wallet.
Install Mechanism
Instruction-only skill with no install steps or code files — lowest install risk (nothing written to disk by the skill itself).
Credentials
No required env vars, but metadata lists an optional SOLANA_WALLET_KEY for autonomous payments. Requesting (even optionally) a private key is high-sensitivity and should be justified with precise usage and guidance (e.g., ephemeral wallets only). The doc's payment/trial flow is underspecified: it's unclear how a wallet is associated with TRIAL requests if the tx_hash value 'TRIAL' is acceptable, which raises questions about how wallet-bound quotas are enforced without exposing private keys.
Persistence & Privilege
always:false and user-invocable: true — the skill does not request forced or always-on presence and does not modify other skills. No elevated platform privileges are requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install trustboost-pii-sanitizer - After installation, invoke the skill by name or use
/trustboost-pii-sanitizer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.3
- Added a homepage link (GitHub repository) to the skill metadata.
- Updated the version number in metadata from 2.0.1 to 2.0.2.
- No functional or API-level changes.
v2.0.2
trustboost-pii-sanitizer v2.0.2
- Updated internal version metadata from 2.0.0 to 2.0.1.
- Added a new metadata field, `requires_env`, specifying an optional environment variable (SOLANA_WALLET_KEY) for agents needing autonomous payments.
- No other functional or user-facing changes detected.
v2.0.1
- API endpoint and health check URLs updated from onrender.com to api.trustboost.dev.
- No other functional changes; all features, payment, and compliance details remain the same.
- Documentation and operator verification sections now reference the new API domain.
v2.0.0
TrustBoost PII Sanitizer v2.0 brings major infrastructure and API updates:
- Migrated from Make.com to a new API endpoint powered by FastAPI, Supabase, and Render (AWS) for improved reliability.
- Per-wallet TRIAL quota: 50 free sanitizations per Solana wallet (was global).
- Audit logging now handled via Supabase PostgreSQL (never stores raw input).
- API endpoints, health checks, and documentation updated to reflect new infrastructure.
- Enhanced replay attack protection and explicit wallet-based free quota.
- Streamlined error and success responses; see updated JSON schema.
v1.2.1
**Major update: Adds a transparency section with detailed operator and data flow disclosure.**
- Added a "Transparency Notice" with clear explanations of data flow, storage, Make.com processing, and audit trail for compliance clarity.
- Now explicitly highlights when NOT to use the skill (e.g., on-prem HIPAA, non-approved data processors, or real secrets in prod).
- Expanded payment model explanation with cautionary guidance for autonomous agent use—emphasizing quota checks and wallet key safety.
- Clearly documents operator identity, audit/compliance endpoints, and repository links for verification.
- No changes to core API functionality or integration method.
v1.2.0
trustboost-pii-sanitizer 1.2.0 – Major upgrade with multilingual, autonomous, and privacy features.
- Adds country-specific PII detection for English, Spanish (LATAM), Portuguese, German, and Japanese texts.
- No authentication or SDK required; single POST request workflow introduced with 50 free trial uses.
- Supports privacy compliance for GDPR, LGPD, APPI, HIPAA, CCPA, DPDPA.
- Autonomous Solana-based payment and quota management with a new tx_hash system.
- Responds with sanitized text, safety score (0.0–1.0), risk category, and usage metrics.
- Enhanced documentation and code samples for agent and pipeline integration.
Metadata
Frequently Asked Questions
What is TrustBoost PII Sanitizer?
Sanitizes PII from text before sending to LLMs. Use when handling user-generated text that may contain sensitive data, when privacy compliance is required (G... It is an AI Agent Skill for Claude Code / OpenClaw, with 135 downloads so far.
How do I install TrustBoost PII Sanitizer?
Run "/install trustboost-pii-sanitizer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TrustBoost PII Sanitizer free?
Yes, TrustBoost PII Sanitizer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does TrustBoost PII Sanitizer support?
TrustBoost PII Sanitizer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TrustBoost PII Sanitizer?
It is built and maintained by teodorofodocrispin-cmyk (@teodorofodocrispin-cmyk); the current version is v2.0.3.
More Skills