Redacta

This skill appears coherent and lightweight, but check the following before using on real patient data: 1) Model/data handling: the SKILL.md says processing is "local" but actual text may be sent to whatever language model you use—confirm your model provider's data processing and retention policies or run models on-prem if required. 2) Clinician/institution names: the default preserves clinician and hospital names; if your policy requires removing staff or institutional identifiers, instruct the agent to redact them or change the rule. 3) Review outputs: the skill admits it cannot guarantee 100% detection — always manually review pseudonymised text and the redaction report before sharing. 4) Test first: run the skill on representative non-sensitive examples to validate regex/context rules (especially NHS check-digit behaviour and date-context decisions). 5) Scope limits: v1 is text-only (no PDFs/images). If you need stronger guarantees or audit logging, consider integrating with a vetted de-identification pipeline rather than relying solely on instruction-driven redaction.