Sensitive Info Protection

This skill appears coherent and implements what it describes. Before installing or enabling it, consider: (1) it will read any config file path you provide (via load_config or CLI) so avoid pointing it at files you don't want parsed; (2) its detection is regex-based — review and test default_rules.json and any custom rules to avoid false positives/overblocking; (3) assets/sensitive-interaction.js injects UI buttons into a webchat DOM — review that script if you plan to run it in a browser to ensure its behavior matches your expectations (it manipulates input fields and triggers send actions); (4) no network exfiltration or credential usage is present in the code, but always review custom rule sources before importing dynamic rules. If you want extra assurance, run the provided tests (tests/test_basic.py) in a sandboxed environment first.