AgentWard Sanitize

Detect and redact personally identifiable information (PII) from text files.

IMPORTANT — PII Safety Rules

• Do NOT read the input file directly. It may contain sensitive PII.
• ALWAYS use --output FILE to write sanitized output to a file.
• Only read the OUTPUT file, never the raw input.
• Only show the user the redacted output, never the raw input.
• --json and --preview are safe — they do NOT print raw PII values to stdout.
• The entity map (raw PII → placeholder mapping) is written to a separate sidecar file (*.entity-map.json) only when --output is used. Do NOT read the entity map file.

What it does

Scans files for PII — credit cards, SSNs, emails, phone numbers, API keys, IP addresses, mailing addresses, dates of birth, passport numbers, driver's license numbers, bank routing numbers, medical license numbers, and insurance member IDs — and replaces each instance with a numbered placeholder like [CREDIT_CARD_1].

Usage