mitools-desensitize

What This Skill Does

The mitools-desensitize tool is a powerful and flexible agent skill designed to protect sensitive data by automatically identifying and masking private information using advanced regular expression patterns. Whether you are dealing with PII (Personally Identifiable Information) or sensitive technical credentials, this tool ensures compliance and data privacy.

The core functionality includes specialized support for mobile numbers, government-issued IDs, bank card details, email addresses, Chinese names, IP addresses, system file paths, and continuous digit sequences. It goes beyond simple redaction by offering a "reversibility" feature, allowing users to restore masked data using a mapping table, which is invaluable for debugging production issues where the original data identity needs to be occasionally verified in a secure, controlled manner.

Installation

To integrate this utility into your OpenClaw environment, use the standard installation command provided by the developer:

clawhub install openclaw/skills/skills/bianchengyy/mitools-desensitize

Once installed, the tool generates a desensitize_config.json file in your workspace, allowing you to fine-tune the脱敏 (desensitization) levels, define custom regular expression rules, and manage specific wildcard substitutions to match your organization's internal security policies.

Use Cases

• Log Masking: Automatically scrub sensitive user information from application logs before they are uploaded to centralized monitoring platforms like ELK or Splunk.
• Testing & QA: Generate realistic-looking but fake test datasets from production logs to ensure compliance with GDPR or other privacy regulations while maintaining data format integrity.
• Data Sharing: Quickly prepare reports or document snippets to be shared with third parties or stakeholders without exposing actual user identities or financial details.
• Security Auditing: Identify and sanitize local machine path information or internal IP structures before distributing logs across distributed development teams.

Example Prompts

1. "脱敏 用户的个人日志文件 ./logs/app-2023-10.log 以确保其中不包含真实的手机号和身份证信息。"
2. "脱敏还原 "张的手机号是138***678" '{"username": {"张三": "demo01"}}'"
3. "请列出当前所有支持的脱敏规则，并检查是否可以为我的系统自定义新的IP地址脱敏格式。"

Tips & Limitations

• Precision: While the regex engine is highly robust, always review the output of masked sensitive files when handling critical production data to ensure that custom fields are captured correctly.
• Performance: For extremely large log files (multi-gigabyte), consider splitting the files before running the tool to prevent memory bottlenecks.
• Reversibility: Keep your mapping JSON files strictly secure. Because the tool supports data restoration, the mapping file itself is a high-value security asset and should be treated as sensitive data.