scan_output
Scan outgoing text to detect and redact PII and secrets before sending or logging externally.
Instructions
Scan outgoing text for PII and secrets/credentials before an agent sends it.
Use this on agent-generated responses before returning them to a user, posting them externally, or logging them anywhere outside this system.
Args: text: The text to scan for PII (emails, phone numbers, SSNs, credit cards) and secrets (AWS keys, GitHub tokens, API keys, private keys).
Returns: A dict with: risk_level (low/medium/high), findings (list of what was detected and where), redacted_text (safe version with sensitive data replaced by labeled tokens), and recommendation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes |