OpenClaw Security PII Audit

Multi-region async PII detection for OpenClaw sessions. Scans user input, prompts, context, and knowledge base content for sensitive personal data across CN,...

This skill appears to do what it says: local PII scanning with per-source sampling, masked previews, and NDJSON audit files. Before installing, consider: (1) where the audit directory will be (set OPENCLAW_AUDIT_DIR if you need a specific location and ensure write permissions), (2) audit files and the cache contain hashes and masked previews — treat the audit directory as sensitive and apply your retention/policy controls, (3) the skill relies on callers to choose which content to scan; avoid feeding it secrets you do not want written even in masked form, and (4) review retention/cleanup configuration (default 7 days) to ensure it meets your compliance needs. No network exfiltration, secret-env requests, or surprising install steps were found in the bundle.

Type: OpenClaw Skill Name: openclaw-security-pii-audit Version: 1.0.0 The openclaw-security skill bundle is a comprehensive PII auditing tool designed for local session monitoring. It implements multi-region detection for various sensitive data types (IDs, bank cards, phones, etc.) using regex and algorithmic validation (Luhn, checksums). Security features include local-only NDJSON logging, data masking, file locking for concurrency, and a secure temp-file workflow to avoid exposing PII in process metadata. The code is well-documented, includes extensive unit tests (test_all.py), and lacks any indicators of data exfiltration or malicious intent.