privacy-first

Privacy First

This skill ensures no email addresses or personal data leak into the codebase. It provides detection, prevention, and automated checking.

When to Use

• User asks: "prevent emails", "remove personal data", "privacy check", "never use email"
• Before writing any new code, config, or documentation file
• During code review or quality gate checks
• When adding contact information to any file

Agent Workflow

1. Before Writing Any File

Before creating or editing any file, check for email patterns:

# Scan the file being edited for email patterns
grep -E '[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}' <file> || true

2. Replacement Rules

Context	Instead of	Use
Author/contact	[email protected]	GitHub Issues link
Support	[email protected]	https://github.com/owner/repo/issues
Code of Conduct	[email protected]	"Report via GitHub Issues"
Package metadata	email = "..."	Remove email field entirely
Examples	[email protected]	Test domain: [email protected] (only in tests)

3. File-Type Specific Rules

Python (pyproject.toml, setup.py)

# Bad
authors = [{name = "Author", email = "[email protected]"}]

# Good
authors = [{name = "Author"}]

Markdown (README.md, CONTRIBUTING.md)

<!-- Bad -->
Contact: [email protected]

<!-- Good -->
Report issues: https://github.com/owner/repo/issues

Configuration files

• Never add email fields
• Use URLs to GitHub instead

4. Exceptions (Allowed)

The following are permitted and should NOT be flagged:

• Test data in tests/ directories using standard test domains:
  • example.com, example.org, test.com, localhost
• URLs in documentation pointing to external services
• Git history (cannot modify)
• Skill reference files with generic examples (for demonstration)

Quality Gate Integration

To add automated checks to pre-commit or CI:

# Add to scripts/quality_gate.sh or .pre-commit-config.yaml

# Scan for email patterns (exclude test data and git)
EMAIL_PATTERN='[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}'

# Exclude patterns (test domains, git, node_modules)
EXCLUDE_PATTERN='example\.com|example\.org|test\.com|\.git|node_modules'

# Check source files
if grep -rE "$EMAIL_PATTERN" --include="*.py" --include="*.toml" --include="*.yaml" --include="*.json" --include="*.md" . 2>/dev/null | grep -vE "$EXCLUDE_PATTERN"; then
    echo "ERROR: Email address detected in codebase"
    exit 1
fi