security-guardian

Enforces security guardrails including credential scanning and audit logging for AI workflows.

Updated Jan 14, 2026
One-click install
npx skills add https://github.com/omosb1-sys/epl-data-pipeline --skill security-guardian-omosb1-sys
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-guardian
Source: https://github.com/omosb1-sys/epl-data-pipeline/tree/main/epl_project/.agent/skills/security-guardian
Command: npx skills add https://github.com/omosb1-sys/epl-data-pipeline --skill security-guardian-omosb1-sys

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill prevents data leakage and enforces enterprise-grade security guardrails when using AI, addressing concerns about privacy and compliance.

Core Features & Use Cases

  • Data De-identification: locally mask or remove PII before processing non-public data.
  • Zero-Static Credentials: enforce no hardcoded secrets and promote use of IAM roles or temporary credentials.
  • Credential Scanning & Audit Trails: scan for secrets prior to operations and maintain compliance-ready logs.
  • Use Case: in an AI-assisted customer support tool, ensure that sensitive data never leaves the secure processing environment.

Quick Start

To activate, enable user-invocable mode and run the on-device de-identification workflow prior to any AI interaction. Before any task, execute security_credential_scanner.py to validate credentials and prevent leakage.

Frequently Asked Questions about security-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent data leakage when using AI workflows in an enterprise environment?

To prevent data leakage in enterprise AI workflows, you must apply security guardrails such as data de-identification, zero-static credential enforcement, and pre-operation credential scanning to ensure sensitive information never leaves the secure processing environment.

How do I mask PII before processing data with an AI tool?

You can mask PII before AI processing by running an on-device de-identification workflow. This locally removes or masks personally identifiable information prior to any AI interaction, ensuring privacy and compliance.

What is the best way to enforce zero-static credentials and eliminate hardcoded secrets?

The best way to enforce zero-static credentials is to prohibit hardcoded secrets and mandate identity-based credentials, such as IAM roles or temporary credentials, while executing automated credential scans before operations to validate compliance.

Does this credential scanning approach work for development, testing, and production environments?

Yes, credential scanning and data safeguards apply across development, testing, and production environments. The security guardrails execute before operations to validate credentials and maintain compliance-ready audit logs throughout the enterprise AI workflow.

Why do I need audit logging for AI-assisted customer support tools?

You need audit logging for AI-assisted customer support tools to maintain compliance-ready records of security guardrails. Credential scanning and audit trails verify that sensitive data never leaves the secure processing environment during AI interactions.

What are the limitations of relying on on-device processing for data anonymization?

On-device processing for data anonymization requires enabling user-invocable mode and executing local scripts prior to AI interactions. It limits processing to the device's secure environment to prevent leakage but depends on local execution capacity.