CtrlK
BlogDocsLog inGet started
Tessl Logo

testland/pii-masking-pipeline-builder

Build-an-X workflow that owns the full detect → mask → verify pipeline for PII in test data. Walks the author through (1) classifying each field against the cross-regime PII catalog (GDPR / CCPA-CPRA / NIST SP 800-122 / HIPAA, in references/pii-categories.md), (2) picking a masking operator from the techniques catalog (seven canonical operators + Presidio operators + privacy models, in references/masking-techniques.md), (3) deciding pseudonymisation (reversible, in GDPR scope) vs anonymisation (irreversible, out of scope), (4) ordering the pipeline (detect → operator → audit) and emitting a deployable YAML config for Presidio + Faker + Synthea wrappers (Faker-as-masking-operator detail in references/faker-masking-operators.md), and (5) running the adversarial verification pass that re-detects PII in the masked output and blocks promotion on a leak. Use when non-production environments need masked production data - from field classification through runnable masking config to the leak audit.

75

Quality

94%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

Overview
Quality
Evals
Security
Files

Quality

Content

92%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable workflow with explicit validation checkpoints and properly disclosed one-level references. The only minor weakness is mild redundancy between the Step 6 template and Step 7 worked example.

DimensionReasoningScore

Conciseness

Dense and operational with no padding of concepts Claude already knows, but the Step 7 worked example largely reuses the Step 6 YAML shape, a minor redundancy that could be trimmed.

4 / 5

Actionability

Provides copy-paste-ready YAML specs, a concrete audit command ('shuf -n 1000 masked-users.csv > sample.csv'), and specific Presidio config (score_threshold, entity list) covering the common cases.

5 / 5

Workflow Clarity

Steps 1–7 are clearly sequenced with an explicit verification-pass checklist, BLOCK/PASS-WITH-CAVEATS/PASS verdicts, and feedback loops (re-audit on spec change); the batch operation includes validation so it is not capped.

5 / 5

Progressive Disclosure

Clear overview body with well-signaled, one-level-deep references to real bundle files (pii-categories.md, masking-techniques.md, faker-masking-operators.md, regime-catalogs.md, privacy-models.md), all of which exist.

5 / 5

Total

19

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific, third-person description that clearly states both capability and trigger conditions with concrete enumerated actions. The only gap is missing common synonyms (anonymize/de-identify) in the trigger phrasing.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'detect → mask → verify pipeline', 'classifying each field', 'picking a masking operator', 'deciding pseudonymisation vs anonymisation', 'emitting a deployable YAML config', 'running the adversarial verification pass' — with comprehensive coverage and third-person voice.

5 / 5

Completeness

Explicitly answers both 'what' via five enumerated pipeline steps and 'when' via the closing 'Use when non-production environments need masked production data - from field classification through runnable masking config to the leak audit.'

5 / 5

Trigger Term Quality

Includes natural terms like 'PII in test data', 'masked production data', and 'non-production environments', but omits common synonyms a user might say such as 'anonymize', 'de-identify', or 'scrub'.

4 / 5

Distinctiveness Conflict Risk

Occupies a clear niche — cross-regime PII masking pipelines for test data — with triggers unlikely to fire for unrelated skills, giving minimal conflict risk.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

Table of Contents