Data Masker Protocol

This skill prevents sensitive production data (PII, PHI, financial records) from leaking into lower environments (staging, development, testing). It analyzes schemas and generates idempotent masking scripts.

Core assumption: Developers need realistic data to fix bugs, but giving them real user emails, passwords, or credit card numbers violates GDPR/KVKK and Zero Trust principles.

0. Context Intake

Before designing, make sure you have the inputs below. Read the previous workflow step's artifact first if it exists. Ask only for what is missing, in a single message, and state any assumption you make instead of blocking.

• Engine and the tables in scope, or permission to scan the schema.
• Purpose of the copy (staging, analytics, vendor sharing) and applicable regulation (GDPR, KVKK, HIPAA).
• Columns that must stay joinable or realistic (deterministic masking).