pii-safe-documents

From README

PII Safe Documents This skill creates a reversible, locally redacted working copy with a strict main-agent workflow boundary: The main agent is untrusted for raw data. It receives paths and safe receipts only. The bundled open-source local wrapper may read the original solely to run PII Guard and local Ollama. No hook is required. Normal wrapper output suppresses raw content. This is strong protection against accidental model exposure, not an OS security boundary against a malicious process running as the same macOS user. A Skill cannot revoke its own filesystem tools. Hostile-agent isolation requires a separately permissioned local broker or OS account. Never describe this Skill alone as mathematically or technically impossible to bypass. Non-negotiable isolation rules When this skill is active, the main agent MUST NOT: Read, preview, search, summarize, diff, upload, attach, or otherwise inspect the original file.