Skip to main content
skill Claude Code CX Codex Cursor GitHub Copilot

pii-detect — Claude Code skill: what it does, how to install

Scans text, source code, and configs for personal data, tokens, and credentials before commits or logging. Flags exposed lines and suggests redaction.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add ruvnet/ruflo --skill pii-detect -a claude-code
Open on GitHub

What pii-detect does

The skill checks text, source files, and configs for sensitive information. It looks for emails, phone numbers, social security numbers, tax IDs, credit cards, API keys, tokens, and passwords. It also flags physical addresses and names tied to sensitive records. When it finds a match, it pinpoints the exact location and recommends redaction.

The workflow uses three stages. It starts with a fast check via mcp__plugin_ruflo-core_ruflo__aidefence_has_pii. If needed, it follows up with a categorized scan using transfer_detect-pii and contextual analysis through aidefence_analyze.

This skill depends on MCP endpoints from the ruflo-core plugin or Bash access. Without Ruflo tools configured in the agent environment, the detection calls will fail.

What it helps with

  • locate hardcoded tokens and credentials in code
  • inspect server logs before writing or exporting them
  • detect personal information in git diffs prior to commit
  • highlight credit card numbers and addresses for redaction

Example prompts for the agent

  • Scan staging.env for exposed API keys and passwords.
  • Run pii-detect on auth.log to find phone numbers and emails.
  • Check git diff with pii-detect before committing.

How to install pii-detect

1Skills CLI (Vercel)

npx skills add ruvnet/ruflo --skill pii-detect -a claude-code

2Manually: put the files in place

~/.claude/skills/pii-detect/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/pii-detect/

From the same set104

The whole set →
ruflo ruvnet This skill adds multi-agent orchestration, memory, routing, and MCP tools to a project. Use it for swarm tasks and multi-step workflows. Claude Code CX Codex Cursor +1 4,000installs Swarm Orchestration ruvnet Skill for managing agent swarms with parallel execution, dynamic topology, and automatic load balancing. Use when a single agent is not enough and you need to orchestrate specialists of different types. Claude Code CX Codex Cursor +1 2,100installs github-project-management ruvnet Turns issue triage and board upkeep into gh and ruv-swarm calls: labels, subtasks, duplicate lookup. Useful when the tracker holds more tickets than order. Claude Code CX Codex Cursor +1 1,400installs github-workflow-automation ruvnet Automates GitHub Actions with AI agent coordination. Generates optimised pipelines, manages pull requests, analyzes failed runs, and deploys updates with risk assessment. Claude Code CX Codex Cursor +1 1,300installs github-code-review ruvnet Runs a swarm of specialized AI agents to inspect GitHub pull requests for security, performance, and architecture issues. Claude Code CX Codex Cursor +1 1,300installs stream-chain ruvnet Chains sequential agent steps together using streaming JSON flow and provides ready-to-run pipelines. Claude Code CX Codex Cursor +1 1,200installs flow-nexus-swarm ruvnet Deploy cloud-based AI agent swarms and define event-driven workflows with message queues. Use it to coordinate tasks, inspect runs, and scale a swarm. Claude Code CX Codex Cursor +1 1,200installs performance-analysis ruvnet Detects bottlenecks in Claude Flow swarms, profiles agent operations, and generates reports with actionable optimization recommendations. Claude Code CX Codex Cursor +1 1,200installs

Similar

salesforce-apex-quality official github Checks Apex for governor-limit risks, security gaps, and missing tests. Use it when GitHub Copilot reviews or generates Salesforce classes, triggers, and test code. GitHub Copilot 884installs diagramming-code trailofbits Generates Mermaid diagrams from code graphs using Trailmark. Useful for visualizing call paths, module dependencies, and data flows. Claude Code CX Codex Cursor +1 4,200installs gmgn-token GMGNAI Researches a token by address through the GMGN API, covering price, liquidity, holders and contract risk. Use it before assessing a token purchase. Claude Code CX Codex Cursor +1 17,700installs code-reviewer sickn33 Configures your agent to perform deep code reviews focused on OWASP security flaws, resource leaks, and architecture patterns before merging changes. Claude Code CX Codex Cursor +1 1,000installs shopify-apps sickn33 Patterns for Shopify app development with Remix and React Router. Guides App Bridge setups, Polaris UI components, billing flows, and webhooks. Claude Code CX Codex Cursor +1 1,000installs backend-security-coder sickn33 Hardens backend application code with allowlist validation, safe database queries, secure cookie handling, and API authentication logic. Claude Code CX Codex Cursor +1 1,000installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs

Questions about pii-detect

How do I install pii-detect in Claude Code?

Run npx skills add ruvnet/ruflo --skill pii-detect -a claude-code. The file will be placed in ~/.claude/skills/pii-detect/SKILL.md.

What categories does pii-detect cover?

It detects email addresses, phone numbers, SSNs, tax IDs, credit cards, physical addresses, API keys, passwords, and names linked to sensitive fields.

What tools does pii-detect require?

It relies on MCP tools from the ruflo-core package, including aidefence_has_pii, transfer_detect-pii, and aidefence_analyze, or fallback Bash execution.

Source text

SKILL.md · MIT
---
name: pii-detect
description: Detect and flag personally identifiable information (PII) in text, code, and configurations. Use before committing code, writing logs, storing data, or sending model responses that might contain emails, phone numbers, SSNs, API keys, or passwords.
argument-hint: "<input-text>"
allowed-tools: mcp__plugin_ruflo-core_ruflo__aidefence_has_pii mcp__plugin_ruflo-core_ruflo__aidefence_scan mcp__plugin_ruflo-core_ruflo__aidefence_analyze mcp__plugin_ruflo-core_ruflo__transfer_detect-pii Bash
---

# PII Detection

Detect personally identifiable information before it enters logs, commits, or responses.

## When to use

Before committing code, storing data, or sending responses that might contain PII (emails, phone numbers, SSNs, API keys, passwords).

## Steps

1. **Quick PII check** — call `mcp__plugin_ruflo-core_ruflo__aidefence_has_pii` with the text for a boolean result
2. **Detailed scan** — call `mcp__plugin_ruflo-core_ruflo__transfer_detect-pii` for categorized PII findings
3. **Full analysis** — call `mcp__plugin_ruflo-core_ruflo__aidefence_analyze` for context-aware PII detection
4. If PII found, flag the specific locations and suggest redaction

## PII categories detected

- Email addresses, phone numbers
- Social security numbers, tax IDs
- Credit card numbers
- API keys, tokens, passwords
- Physical addresses
- Names linked to sensitive data

© ruvnet · MIT · ruvnet/ruflo

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor