
PII & Data-Leak Scanner
Scan your schemas, seed data, config, and logs for personal data before it leaks. Detects PII-indicating column and key names (email, ssn, phone, address) across SQL, CSV, and JSON, plus PII in the data itself: email addresses, SSN-like numbers, credit-card-like numbers, phone numbers, and PII written into log files. Each finding is flagged with its location and a GDPR-style review note. Heuristic by design: it surfaces what to review, not a compliance guarantee.
- Audit database seed files for real customer data before committing code.
- Scan server logs for accidental PII logging during local development.
- Verify that fixture files are properly anonymized for integration tests.
$15
· or 75 creditsSecure checkout via Stripe
Included in download
- Audit database seed files for real customer data before committing code.
- Scan server logs for accidental PII logging during local development.
- terminal, file_read automation included
- Ready for Works with Claude Code
Sample input
Scan our database seed files and the recent logs in the /tmp folder for any potential PII leaks or sensitive data.
Sample output
PII Scan Results
- CRITICAL:
seeds/users.sql:12- Found SSN-pattern (xxx-xx-xxxx) - HIGH:
tmp/app.log:142- Potential email address exposure (admin@company.com) - MEDIUM:
fixtures/orders.json- Sensitive column name "credit_card_last_four" detected.
See remediation-snippets.md for fixes.
Scan your schemas, seed data, config, and logs for personal data before it leaks. Detects PII-indicating column and key names (email, ssn, phone, address) across SQL, CSV, and JSON, plus PII in the data itself: email addresses, SSN-like numbers, credit-card-like numbers, phone numbers, and PII written into log files. Each finding is flagged with its location and a GDPR-style review note. Heuristic by design: it surfaces what to review, not a compliance guarantee.
$15
· or 75 creditsSecure checkout via Stripe
Included in download
- Audit database seed files for real customer data before committing code.
- Scan server logs for accidental PII logging during local development.
- terminal, file_read automation included
- Ready for Works with Claude Code
- Instant install
Sample input
Scan our database seed files and the recent logs in the /tmp folder for any potential PII leaks or sensitive data.
Sample output
PII Scan Results
- CRITICAL:
seeds/users.sql:12- Found SSN-pattern (xxx-xx-xxxx) - HIGH:
tmp/app.log:142- Potential email address exposure (admin@company.com) - MEDIUM:
fixtures/orders.json- Sensitive column name "credit_card_last_four" detected.
See remediation-snippets.md for fixes.
About This Skill
What it does
The PII Data Leak Scanner is a specialized audit tool designed to identify sensitive Personal Identifiable Information (PII) within your codebase and data artifacts. It performs heuristic scans across SQL schemas, CSV datasets, JSON files, seed data, fixtures, and application logs to detect accidental exposure of emails, SSNs, credit card numbers, and sensitive column names.
Why use this skill
Prompting a standard AI to "find PII" often leads to inconsistent results and missed patterns. This skill provides a structured, developer-focused workflow using a dedicated Python scanner and an industry-standard audit checklist. It ensures that before you push code to a public repo or share a database dump, you have an evidence-based report citing exact filenames and line numbers for remediation.
Supported tools
- File Formats: .sql, .csv, .json, .log
- Frameworks: Optimized for Rails/Django/Node seed and fixture directories
- Standard Library: Pure Python implementation with no external dependencies required
What the output looks like
You receive a structured Markdown report categorized by severity (Critical to Info). Each finding includes the file path, line number, the specific evidence found (e.g., a regex match for a phone number), the potential impact, and a templated remediation step you can apply immediately.
Use Cases
- Audit database seed files for real customer data before committing code.
- Scan server logs for accidental PII logging during local development.
- Verify that fixture files are properly anonymized for integration tests.
- Generate a PII audit report for sensitive JSON and CSV data exports.
Known Limitations
- Heuristic detection: expect false positives (test or example values) and false negatives; it is a review aid, not a DLP product or a compliance audit.
- Detects common PII patterns and PII-indicating names; locale-specific or unusual formats may be missed.
- Does not classify data sensitivity or certify GDPR/CCPA compliance.
How to Install
mkdir -p ~/.claude/skills && curl -sL https://www.agensi.io/api/install/pii-data-leak-scanner -o /tmp/pii-data-leak-scanner.zip && unzip -o /tmp/pii-data-leak-scanner.zip -d ~/.claude/skills && rm /tmp/pii-data-leak-scanner.zipFree skills install directly. Paid skills require purchase - use the download button above after buying.
Reviews
No reviews yet - be the first to share your experience.
Only users who have downloaded or purchased this skill can leave a review.
Early access skill
Be the first to review this skill.
Only users who have downloaded or purchased this skill can leave a review.
Security Scanned
Passed automated security review
Permissions
File Scopes
All scanning is local. The bundled scanner reads matching files, prints markdown or JSON findings, and never transmits, uploads, or stores your data anywhere. It installs nothing and modifies nothing. Any write, install, deploy, or live-account action requires explicit user confirmation.
Works with Claude Code, Codex CLI, Cursor, OpenCode/OpenClaw, Gemini CLI, and other agents that load SKILL.md folders. The bundled scanner uses the Python 3 standard library only and degrades to manual checklist mode when Python or matching files are unavailable.
Creator
JustHandled Labs creates focused agent skills and workflow packs for Claude, Codex, Cursor, and AI-assisted builders. Each tool is designed around a real repeatable task: cleaner commits, better PRs, stronger handoffs, safer repo hygiene, clearer documentation, and less copy-paste chaos. The goal is not generic AI productivity. The goal is specific workflows that are easier to run, review, and repeat. Maintained by H.J. Westerfield, with a background in communications, editing, project coordination, customer support, and practical AI systems. JustHandled Labs builds tools for people who want useful automation without theatrical complexity.
Frequently Asked Questions
Learn More About AI Agent Skills
More Premium Skills
Bounty Security Pattern Master Library — 399 Vulnerability Patterns
A premium library of 399 vulnerability patterns and DeFi attack vectors for AI-driven bug hunting and security audits.
designing-hybrid-context-layers
Architects the right retrieval strategy for every query — teaching your agent when to use RAG, a knowledge graph, or a temporal index instead of defaulting to vector search for everything.
consumer-motivation-analyzer
Go beyond surface-level feedback to uncover the psychological drivers and hidden motivations behind buyer behavior.
keyword-research
Transform URLs or product lists into SEO keyword research packs with Google Ads data and intent-based clustering.