enclave-token-map

Tokenize sensitive data and enforce same-origin resolution within Latch Enclave sessions.

2|Updated Feb 26, 2026
One-click install
npx skills add https://github.com/latchagent/latch-core --skill enclave-token-map
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: enclave-token-map
Source: https://github.com/latchagent/latch-core/tree/main/.agents/skills/enclave-token-map
Command: npx skills add https://github.com/latchagent/latch-core --skill enclave-token-map

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of protecting sensitive data within Latch Enclave sessions by tokenizing sensitive values, preventing cross-service data exfiltration, and enabling secure handling of data in proxy responses.

Core Features & Use Cases

  • Tokenization of Sensitive Data: Converts sensitive values to opaque tokens for secure storage and transmission.
  • Same-Origin Enforcement: Ensures tokens can only be resolved back to their real value within the originating service.
  • Automated Lifecycle Management: In Phase 2, tokens are automatically created and resolved within the proxy pipeline without manual intervention.

Quick Start

Initialize the Skill by loading the TokenMap service and setting up tokenization for a new session.

Frequently Asked Questions about enclave-token-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I tokenize sensitive data in proxy responses to prevent cross-service exfiltration?

Tokenizing sensitive data in proxy responses converts sensitive values to opaque tokens, preventing cross-service data exfiltration while enabling secure handling. This ensures data is protected during storage and transmission across services.

What is same-origin policy enforcement for data tokens?

Same-origin policy enforcement for data tokens ensures that tokens can only be resolved back to their real values within the originating service. This mechanism prevents unauthorized services from accessing the original sensitive data.

How do I set up automated token lifecycle management in a secure proxy pipeline?

Automated token lifecycle management in a secure proxy pipeline requires implementing tokenization logic and token resolution support within the originating service. This automatically creates and resolves tokens without manual intervention.

Does Latch Enclave support tokenization for securing sensitive session data?

Latch Enclave supports tokenization for securing sensitive session data by providing a secure environment where tokens are automatically managed. This prevents cross-service data exfiltration and ensures secure handling in proxy responses.

Do I need to implement token resolution in my service to use tokenization?

You need to implement token resolution within your originating service to use tokenization effectively. The proxy pipeline handles token creation, but the originating service must support resolving tokens back to their real values.

What is the best way to prevent cross-service data exfiltration in proxy responses?

The best way to prevent cross-service data exfiltration in proxy responses is to implement tokenization with same-origin enforcement. This converts sensitive values to opaque tokens that can only be resolved within the originating service.