Sensitive Data Masker

Intelligent sensitive data detection and masking. Uses Microsoft Presidio + SQLite for automatic PII redaction with local restoration support.

This skill mostly does what it says (local PII detection + local mapping/restore), but two issues need your attention before installing: 1) The Python code requires the cryptography library (it will exit if missing) yet the SKILL.md and metadata do not include installing cryptography — make sure to pip install cryptography so the skill's encryption works as intended. 2) The hook implementation passes full message text as a command-line argument to the masker process; command-line arguments are visible to other users on the same machine (ps aux), which can leak secrets. Prefer changing the handler to pass sensitive content via stdin or another IPC mechanism, or ensure the host is multi-user-safe and that only trusted accounts exist. Also review file permissions and backup policies for ~/.openclaw/data/sensitive-masker (the mapping DB and the encryption key are stored locally and must be protected). If you cannot guarantee host-level protections or cannot enforce the code change to avoid argv exposure, treat this skill as risky and do not enable it on multi-tenant systems.

Type: OpenClaw Skill Name: sensitive-data-masker Version: 1.0.7 The skill is designed to enhance security by masking sensitive data before it reaches an LLM and restoring it locally for task execution. It employs robust security measures, including mandatory AES-256 encryption for sensitive data at rest (enforced by `sensitive-masker.py` which exits if `cryptography` is not available), secure key generation with `chmod 0o600`, and parameterized SQLite queries to prevent SQL injection. The OpenClaw hook (`handler.js`) uses `child_process.spawn` with an argument array, mitigating shell injection risks. All data is stored locally within the skill's dedicated directory, and there is no evidence of data exfiltration or malicious prompt injection attempts in any files.