pii-scan
Scan content for PII and secrets before writing files, sending messages, or including sensitive data in responses. Use before and after any operatio…
它会碰到什么
这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。
技能内容
Before writing files or after tool calls that produce data, call the check_output MCP tool to scan for PII and secrets:
connector_type:codex.Write(for file writes),codex.Bash(for command output), or the appropriate tool typemessage: the text content to scan — for file writes, scan the content being written
Before file writes: If the content being written contains PII (SSN, credit card, email, phone, etc.), check_output will return a redacted_message. Write the redacted version instead of the original, or warn the user that the content contains sensitive data.
After tool output: If tool output contains PII, use the redacted_message version in your response instead of the original.
If the response shows allowed: false, do not write the file or include the output in your response.
Note: For Bash/exec_command tool calls, PII scanning is handled automatically by the PostToolUse hook. This skill covers Write, Edit, and other non-Bash operations where hooks cannot intercept.
想直接用这个技能？
本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。
它属于哪个仓库
plugins/getaxonflow/axonflow-codex-plugin/skills/pii-scan/SKILL.md