Detect unmasked sensitive information in API responses, logs, and exports.
npx skills add https://github.com/Q16G/aster --skill sensitive-info-exposure
Please help me install this Agent Skill. Skill: sensitive-info-exposure Source: https://github.com/Q16G/aster/tree/main/skills/pentest/sensitive-info-exposure Command: npx skills add https://github.com/Q16G/aster --skill sensitive-info-exposure
The Skill helps identify and prevent leakage of unmasked sensitive information in interfaces, logs, and exports, safeguarding privacy and compliance.
Run a test against a sample response to verify that sensitive fields are masked and not exposed in logs or exports.
High-intent search queries and answers about installing and using this skill.
Sensitive data exposure occurs when unmasked PII, credentials, or financial records appear in API responses, logs, or exports. You can prevent this by running deterministic checks to enforce data masking, validate access controls, and ensure closure verification for regulatory compliance.
Yes, you can run PII masking checks against user detail endpoints. The process verifies that sensitive fields are masked in API responses, logs, and exports, providing guided remediation steps to enforce access controls and traceability for compliance workflows.
You validate access-control checks for sensitive user data by applying deterministic checks to API responses and exports. This enforces data masking, verifies evidence closure, and provides remediation guidance to maintain privacy and compliance across user records and system configurations.
Yes, this approach works for financial records and system configurations by applying privacy and compliance workflows across all user data. It detects unmasked sensitive fields in logs and exports, enforcing masking and access-control checks to maintain data security and traceability.
Sensitive information may still appear in logs if baseline checks lack closure verification. You need deterministic checks that validate evidence and traceability, ensuring masking rules are actively enforced across all API responses, logs, and data exports without gaps.
marquesfelipEnforce field-level masking and redaction for sensitive data in APIs, logs, and storage.
stakworkTrack regulatory and policy compliance gaps through assignment, remediation, monitoring, closure, or risk acceptance.
azaslonovSet up and manage Azure API Management as an AI gateway with policy enforcement and monitoring.
Theodora-YMask work calendar event titles during create and view operations.
