What is the LINDDUN D2 framework used by this skill?

LINDDUN is a privacy threat modeling framework; the D2 category specifically focuses on the 'Disclosure of Information,' ensuring that personal data is protected against unauthorized access and leaks.

How does this differ from standard security scanners?

Unlike general scanners that look for system information disclosure, this skill focuses specifically on Personal and Sensitive Data (PII), addressing privacy-specific threats and regulatory requirements.

Can this skill automatically fix PII leaks?

Yes, when using the --fix flag, the skill can generate code replacements for redaction, field-level access control, and data minimization.

Which types of files does this skill analyze?

It focuses on API handlers, data models, logging configurations, error handling logic, caching systems, and third-party SDK integrations.

Personal Data Disclosure Auditor

Name: Personal Data Disclosure Auditor
Author: florianbuetow

byflorianbuetow

•

Security & Testing

Audits source code to identify and mitigate unauthorized personal data (PII) exposure in logs, APIs, and third-party integrations.

The Personal Data Disclosure Auditor skill implements the LINDDUN D2 framework to help developers proactively identify privacy vulnerabilities where personal data might be leaked to unauthorized parties. It meticulously scans for PII in logs, detects over-fetched API responses, traces data flows to third-party services, and identifies sensitive information in error messages or URLs. By providing multi-depth analysis—from quick grep-based scans to expert breach simulations—it ensures applications maintain data confidentiality and comply with global privacy regulations like GDPR, CCPA, and HIPAA.

Key Features

01Automated PII detection in logs, error messages, and debug output

02Third-party SDK analysis for unauthorized personal data sharing

03API response auditing to prevent over-fetching and data leakage

046 GitHub stars

05Cross-file data flow tracing to map information exit points

06Automated redaction and data minimization code generation

Use Cases

01Securing API endpoints to ensure they only return necessary user data

02Identifying and redacting sensitive information leaked to logging or error-tracking services

03Performing a privacy impact assessment for GDPR or CCPA compliance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbuetow/claude-code data-disclosure

For use in Claude.ai and ChatGPT

Download Skill