PII Redaction

Automate PII and sensitive data redaction from logs using regex patterns.

Updated Feb 8, 2026
One-click install
npx skills add https://github.com/eykd/vance-ts --skill pii-redaction-eykd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: PII Redaction
Source: https://github.com/eykd/vance-ts/tree/main/.claude/skills/pii-redaction
Command: npx skills add https://github.com/eykd/vance-ts --skill pii-redaction-eykd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of implementing systematic PII and secret redaction for defense-in-depth data protection in logs, ensuring sensitive information is not inadvertently exposed.

Core Features & Use Cases

  • Comprehensive Redaction: Patterns for protecting sensitive data in logs through multiple redaction layers.
  • Data Classification: Sensitive data classification (never log vs always redact vs conditionally log).
  • Pattern-Based Detection: Regex for API keys, tokens, credit cards, and PII.
  • Field-Level Detection: Based on key names for redaction and masking.
  • Redaction Functions: For values, objects, strings, and URLs.
  • URL Sanitization: Remove query parameters and path segments containing tokens.
  • Use Case: Integrate this Skill into your logging infrastructure to automatically redact sensitive information from logs, such as API keys and personal data, ensuring compliance with data protection regulations.

Quick Start

Use the pii-redaction skill to redact sensitive data from your log file 'app.log'.

Frequently Asked Questions about PII Redaction

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I redact sensitive data and PII from application logs?

To redact PII from application logs, apply regex pattern matching to identify and mask sensitive information like API keys, tokens, and credit cards. This process uses multiple redaction layers for comprehensive log sanitization.

What is data classification in the context of log sanitization?

Data classification in log sanitization categorizes sensitive information into never log, always redact, or conditionally log tiers. This framework dictates handling rules for different PII types to ensure defense-in-depth data protection.

How do I mask API keys and tokens in URL parameters?

To mask API keys and tokens in URL parameters, apply URL sanitization techniques that remove or redact query parameters and path segments containing secrets. This prevents sensitive credentials from being exposed in logs.

Does regex redaction help with GDPR and HIPAA compliance for log files?

Regex redaction supports GDPR and HIPAA compliance by systematically identifying and masking personally identifiable information in log files. This ensures sensitive personal data and health records are not inadvertently exposed.

Can I redact specific object values based on their key names?

You can redact specific object values based on their key names using field-level detection. This method targets specific keys to apply redaction and masking functions to values, objects, and strings without altering non-sensitive fields.