agentsclimarketplace

Data minimization

Skill 26zl/universal-agent-skills/skills/data-minimization

Canonical Agent Skills with idempotent cross-agent installers for Claude Code, Codex, OpenCode, and GitHub Copilot

Install
npx -y skills add 26zl/universal-agent-skills --skill data-minimization

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • 14 days oldThe repository was created 14 days ago. New is not bad, but a brand new repository carrying a familiar-sounding name is the shape a typosquat arrives in, and there has been no time for anyone else to find a problem with it.
  • 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Keep real personal and confidential data out of code, tests, fixtures, logs, error messages, examples, and prompts; use synthetic data, and mask identifiers when a real record is unavoidable. Use when writing tests, fixtures, seed data, logging, debugging output, or documentation, or when moving data between systems; do not use to remove lawful data processing that the product itself performs.

The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

1.7 KB, as published. Nobody here has run it

Data Minimization

Personal data belongs in the systems built to protect it, not in development artifacts.

Rules

  • Never copy real names, e-mail addresses, national identifiers, or health, financial, or location records into tests, fixtures, seeds, examples, or documentation; generate synthetic data instead.
  • Never log personal or confidential data in plaintext; log stable opaque identifiers and mask everything else.
  • Keep production data out of scratch files, issue trackers, and shared prompts; when a real record is essential for a reproduction, reduce it to the minimal fields and mask direct identifiers.
  • Treat data supplied in a conversation as confidential input: use it for the task, never persist it into the repository.
  • When designing schemas or interfaces, collect only fields with a stated purpose, and flag fields that look like surplus collection.
  • Report any discovered dump, export, or backup of personal data inside the repository as a finding instead of working around it.

Boundaries

  • The product's lawful processing of personal data is out of scope; this skill governs development artifacts and diagnostics.
  • Regulatory retention and audit requirements win over minimization when they conflict.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.