data-disclosure

Analyze source code for personal data disclosure threats mapped to LINDDUN D2.

12|1|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill data-disclosure
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: data-disclosure
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/data-disclosure
Command: npx skills add https://github.com/florianbuetow/claude-code --skill data-disclosure

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps mitigate risks associated with the unauthorized disclosure of personal and sensitive data within your codebase, preventing potential privacy violations and data breaches.

Core Features & Use Cases

  • PII Detection: Scans code for personal identifiable information (PII) in logs, API responses, error messages, and third-party integrations.
  • Data Flow Analysis: Traces how personal data moves within the application to identify potential leakage points.
  • Remediation Suggestions: Provides concrete recommendations for fixing identified disclosure vulnerabilities, such as redaction or access control.
  • Use Case: Automatically audit your application's logging statements to ensure no sensitive customer data like email addresses or credit card numbers are being inadvertently logged.

Quick Start

Analyze the current code changes for any personal data disclosure risks.

Frequently Asked Questions about data-disclosure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for PII exposure in logs and API responses?

To scan source code for PII exposure, analyze logging statements, API responses, and error handling to detect unauthorized personal data disclosure. This process traces data flows to identify potential leakage points and supports automated remediation suggestions.

What is LINDDUN data disclosure threat modeling for application security?

LINDDUN data disclosure threat modeling is a privacy engineering framework category (D2) used to identify personal data exposure risks. It maps threats across application data flows, storage, and third-party sharing to prevent privacy violations and data breaches.

How do I trace personal data flows to find leakage points in my application?

Tracing personal data flows involves analyzing how sensitive information moves within an application to pinpoint leakage points. This data flow analysis identifies where PII might be exposed in logs, API responses, error messages, or third-party integrations.

Can I automatically detect and remediate sensitive customer data in error handling?

Yes, you can automatically detect sensitive customer data in error handling and apply remediation. The analysis identifies PII exposure and provides concrete recommendations for fixing vulnerabilities, such as implementing redaction or access controls.

Does this code analysis support detecting third-party sharing of personal identifiable information?

Yes, the code analysis supports detecting third-party sharing of personal identifiable information. It scans third-party integrations and maps data flows to identify potential unauthorized disclosure points, preventing privacy violations and data breaches.