evidence-hygiene

Redacts cookies, tokens, and PII from screenshots and HAR files for bug reports.

13|2|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/pdparchitect/rook --skill evidence-hygiene-pdparchitect
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: evidence-hygiene
Source: https://github.com/pdparchitect/rook/tree/main/skills/evidence-hygiene
Command: npx skills add https://github.com/pdparchitect/rook --skill evidence-hygiene-pdparchitect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq.

What problem does it solve?

This skill prevents the accidental leakage of sensitive session data and private user information during the bug-bounty reporting process, ensuring your submissions remain professional and secure.

Core Features & Use Cases

  • Cookie Redaction Protocol: Provides standardized methods to mask session tokens, CSRF values, and authorization headers in screenshots and HAR files.
  • PII Black-Bar Discipline: Offers clear guidelines on what to redact versus what to keep visible to prove impact without violating user privacy.
  • HAR Sanitization: Includes automated workflows to strip sensitive headers from network archives before attachment.

Quick Start

Use the evidence-hygiene skill to sanitize the captured HAR file and redact sensitive headers before attaching it to your bug report.

Frequently Asked Questions about evidence-hygiene

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I sanitize a HAR file before submitting it to a bug bounty report?

To sanitize a HAR file for a bug bounty report, you use provided scripts to strip sensitive headers, session cookies, and authorization tokens. This redaction process ensures your network archives comply with privacy standards before attachment.

What should I redact from bug bounty evidence to protect user privacy?

You must redact session cookies, CSRF values, authorization tokens, and personally identifiable information from bug bounty evidence. The skill provides guidelines on what to mask versus what to keep visible to prove impact without violating user privacy.

How does HAR sanitization work for network archives?

HAR sanitization works by running automated workflows that strip sensitive headers and tokens from network archives. This ensures any captured session data or private user information is masked before the HAR file is shared.

Do I need jq to process HAR files for redaction?

Yes, you need jq installed to use the provided sanitization scripts for HAR file processing. This dependency is required to parse the network archives and strip sensitive headers effectively.

Can I use this to mask session tokens in security research screenshots?

Yes, you can use this skill to mask session tokens and authorization headers in security research screenshots. It provides standardized methods to apply PII black-bar discipline and ensure your artifacts remain secure.

What is the best way to prevent session data leakage in security reports?

The best way to prevent session data leakage in security reports is to apply strict redaction protocols to artifacts. This skill sanitizes screenshots and HAR files, preventing accidental leakage of sensitive session data during responsible disclosure.