data-desensitize

Identify and replace sensitive-type patterns in documents with deterministic placeholders.

1|1|Updated Apr 25, 2026
One-click install
npx skills add https://github.com/chenchunrun/onyx-soc --skill data-desensitize
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: data-desensitize
Source: https://github.com/chenchunrun/onyx-soc/tree/main/skills/data-desensitize
Command: npx skills add https://github.com/chenchunrun/onyx-soc --skill data-desensitize

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Automatically identify and replace sensitive information in documents, logs, and code to generate safe, shareable versions without losing readability or context.

Core Features & Use Cases

  • Detects common sensitive types (PII, IPs, domains, credentials) and produces deterministic placeholders.
  • Maintains formatting and relationships while masking data, enabling secure sharing of internal artifacts.
  • Use Case: transformation of incident reports, logs, or configuration files into desensitized versions for public or cross-team review.

Quick Start

Provide a document containing sensitive data and ask this skill to generate a desensitized version with a mapping table.

Frequently Asked Questions about data-desensitize

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I mask sensitive data in Markdown and JSON files for safe sharing?

Mask sensitive data in Markdown and JSON by replacing PII, IPs, and credentials with deterministic placeholders. This process generates a stable mapping table, ensuring the desensitized documents remain readable for cross-team sharing without leaking original values.

How does deterministic data desensitization maintain relationships in logs?

Deterministic data desensitization maintains log relationships by applying a stable mapping table to replace sensitive information with consistent placeholders. This ensures that repeated occurrences of the same sensitive value map to the identical placeholder, preserving context for log analysis.

Can I use this data desensitization approach for incident reports containing credentials?

Yes, you can desensitize incident reports containing credentials. The skill detects common sensitive types like IPs, domains, and passwords, replacing them with deterministic placeholders to produce safe versions for public or cross-team review without losing readability.

What is the best way to sanitize PII in YAML configuration files?

The best way to sanitize PII in YAML configuration files is by applying configurable sensitive-type patterns. This replaces private data with deterministic placeholders while maintaining the original YAML formatting and generating an auditable mapping table for secure artifact sharing.

Do I need a configurable pattern set to replace sensitive data in plain text?

Yes, a configurable pattern set is required to accurately identify and replace sensitive data in plain text. These patterns define what constitutes sensitive information, enabling deterministic placeholder replacement and ensuring auditable replacement rules prevent data leakage.