Security review

Use this skill when

• You are reviewing a Redactive integration for correctness.
• You need a checklist for verifying redaction coverage.
• You want to understand the threat model and limitations.
• You are auditing whether sensitive data could leak through unhandled paths.

Threat model

Redactive reduces accidental sensitive-data exposure. It does not provide a security boundary against a determined attacker.

What redaction protects against

• Accidental logging of credentials, PII, or tokens.
• Unintentional inclusion of secrets in error reports, telemetry, or analytics.
• Sensitive data reaching third-party APIs or AI providers without sanitization.
• Developer oversight in data serialization.