name	privacy-guard
description	Auto-apply whenever reading, outputting, or sharing file contents that may contain sensitive data, including secrets, API keys, passwords, tokens, credentials, .env files, private keys, certificates, or PII. Enforces strict file-type allowlist and redacts sensitive data.

Privacy Guard Protocol

ONLY process:

Code: .go, .rs, .zig, .ts, .js, .py, .c, .cpp, .h, .css, .html
Build: go.mod, go.sum, build.zig*, Cargo.*, package.json, *lock*, requirements.txt, Pipfile, Makefile
Config: Dockerfile, *.yaml/yml, .env.example, .gitignore, .editorconfig, .toml, .json (infrastructure, build, tooling, or agent config — e.g., package.json, tsconfig.json), **/skills/**/*.md (skill files)

REJECT immediately:

Detect and redact to <REDACTED>:

Never output real PII or use it in examples.

name	privacy-guard
description	Auto-apply whenever reading, outputting, or sharing file contents that may contain sensitive data, including secrets, API keys, passwords, tokens, credentials, .env files, private keys, certificates, or PII. Enforces strict file-type allowlist and redacts sensitive data.

ONLY process:

Code: .go, .rs, .zig, .ts, .js, .py, .c, .cpp, .h, .css, .html
Build: go.mod, go.sum, build.zig*, Cargo.*, package.json, *lock*, requirements.txt, Pipfile, Makefile
Config: Dockerfile, *.yaml/yml, .env.example, .gitignore, .editorconfig, .toml, .json (infrastructure, build, tooling, or agent config — e.g., package.json, tsconfig.json), **/skills/**/*.md (skill files)

REJECT immediately:

Detect and redact to <REDACTED>:

Never output real PII or use it in examples.

privacy-guard