maskara-privacy

name	maskara-privacy
description	Prevent accidental disclosure of secrets in coding-agent sessions and route cleanup through maskara.

Maskara Privacy Skill

Use this skill whenever a task touches secrets, credentials, .env files, agent session logs, shell history, or generated reports that may contain private values.

Rules:

• Do not print raw secrets.
• Use masked previews only.
• Prefer checking variable names or key presence over reading values.
• Run maskara scan before sharing agent logs.
• Run maskara report when the user needs rotation guidance.
• Run maskara only when the user wants scan, redaction, and report together.
• If redaction finds credentials, advise rotation. Local redaction does not revoke secrets already shared with providers.