pii-detect — Claude Code skill: what it does, how to install
Scans text, source code, and configs for personal data, tokens, and credentials before commits or logging. Flags exposed lines and suggests redaction.
npx skills add ruvnet/ruflo --skill pii-detect -a claude-codeWhat pii-detect does
The skill checks text, source files, and configs for sensitive information. It looks for emails, phone numbers, social security numbers, tax IDs, credit cards, API keys, tokens, and passwords. It also flags physical addresses and names tied to sensitive records. When it finds a match, it pinpoints the exact location and recommends redaction.
The workflow uses three stages. It starts with a fast check via mcp__plugin_ruflo-core_ruflo__aidefence_has_pii. If needed, it follows up with a categorized scan using transfer_detect-pii and contextual analysis through aidefence_analyze.
This skill depends on MCP endpoints from the ruflo-core plugin or Bash access. Without Ruflo tools configured in the agent environment, the detection calls will fail.
What it helps with
- locate hardcoded tokens and credentials in code
- inspect server logs before writing or exporting them
- detect personal information in git diffs prior to commit
- highlight credit card numbers and addresses for redaction
Example prompts for the agent
- Scan staging.env for exposed API keys and passwords.
- Run pii-detect on auth.log to find phone numbers and emails.
- Check git diff with pii-detect before committing.
How to install pii-detect
1Skills CLI (Vercel)
npx skills add ruvnet/ruflo --skill pii-detect -a claude-code2Manually: put the files in place
~/.claude/skills/pii-detect/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/pii-detect/
1Skills CLI (Vercel)
npx skills add ruvnet/ruflo --skill pii-detect -a codex2Manually: put the files in place
.agents/skills/pii-detect/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add ruvnet/ruflo --skill pii-detect -a cursor2Manually: put the files in place
.cursor/skills/pii-detect/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install ruvnet/ruflo pii-detect2Manually: put the files in place
.github/skills/pii-detect/SKILL.md1Skills CLI (Vercel)
npx skills add ruvnet/ruflo --skill pii-detect -a gemini-cli2Platform CLI
gemini skills install https://github.com/ruvnet/ruflo --path plugins/ruflo-aidefence/skills/pii-detectManually: put the files in place
.devin/skills/pii-detect/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add ruvnet/ruflo --skill pii-detect -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
From the same set104
The whole set →Similar
Questions about pii-detect
How do I install pii-detect in Claude Code?
Run npx skills add ruvnet/ruflo --skill pii-detect -a claude-code. The file will be placed in ~/.claude/skills/pii-detect/SKILL.md.
What categories does pii-detect cover?
It detects email addresses, phone numbers, SSNs, tax IDs, credit cards, physical addresses, API keys, passwords, and names linked to sensitive fields.
What tools does pii-detect require?
It relies on MCP tools from the ruflo-core package, including aidefence_has_pii, transfer_detect-pii, and aidefence_analyze, or fallback Bash execution.
Source text
SKILL.md · MIT
--- name: pii-detect description: Detect and flag personally identifiable information (PII) in text, code, and configurations. Use before committing code, writing logs, storing data, or sending model responses that might contain emails, phone numbers, SSNs, API keys, or passwords. argument-hint: "<input-text>" allowed-tools: mcp__plugin_ruflo-core_ruflo__aidefence_has_pii mcp__plugin_ruflo-core_ruflo__aidefence_scan mcp__plugin_ruflo-core_ruflo__aidefence_analyze mcp__plugin_ruflo-core_ruflo__transfer_detect-pii Bash --- # PII Detection Detect personally identifiable information before it enters logs, commits, or responses. ## When to use Before committing code, storing data, or sending responses that might contain PII (emails, phone numbers, SSNs, API keys, passwords). ## Steps 1. **Quick PII check** — call `mcp__plugin_ruflo-core_ruflo__aidefence_has_pii` with the text for a boolean result 2. **Detailed scan** — call `mcp__plugin_ruflo-core_ruflo__transfer_detect-pii` for categorized PII findings 3. **Full analysis** — call `mcp__plugin_ruflo-core_ruflo__aidefence_analyze` for context-aware PII detection 4. If PII found, flag the specific locations and suggest redaction ## PII categories detected - Email addresses, phone numbers - Social security numbers, tax IDs - Credit card numbers - API keys, tokens, passwords - Physical addresses - Names linked to sensitive data
© ruvnet · MIT · ruvnet/ruflo