Redacta: An OpenClaw Skill That Pseudonymises Clinical Text Before It Reaches an LLM

If you're building an AI agent that processes clinical text, you're likely worrying about PHI leaking to an external model. Redacta, a new OpenClaw skill, tackles that head-on by pseudonymising identifiers before they leave your environment.
What Redacta does
Instead of simply deleting identifiers (which destroys context), Redacta replaces them with consistent pseudonyms. For example:
John Smith → PERSON_001Repeated references stay consistent throughout the document, and the mapping can be used later to restore the original text if needed. This preserves useful context while keeping patient data local.
Key features from the source
- Detects names, dates, contact details, and medical record numbers (MRNs).
- Replaces with deterministic pseudonyms like
PERSON_001— not a generic[NAME]. - Mapping allows round-trip restoration of original text.
- Runs entirely locally — no identifiable data sent to an external model.
- Open source and packaged as an OpenClaw skill.
- Passed 1,400 downloads on ClawHub.
Why this matters for agent workflows
When you send clinical text to an LLM API, you're exposing whatever's in that text. Redacta lets you transform the data first, so the model only sees pseudonyms. For developers in healthcare or anywhere that handles sensitive PII/PHI, this is a practical way to add a privacy layer to your agent pipeline.
Redacta is available on ClawHub and the source is on GitHub.
If you've been hand-rolling regex to strip identifiers or relying on external scrubbing services, check it out. The consistent pseudonym approach is a middle ground between full redaction and raw text.
📖 Read the full source: r/openclaw
👀 See Also
ZCode, Z.ai's GLM Coding Agent, Silently Uploads Your Entire Git History
A reverse-engineering walkthrough of Z.ai's ZCode desktop app shows it packages your entire workspace — .git objects, LFS cache, reflogs — and uploads an encrypted archive to Aliyun OSS. Only Z.ai holds the decryption key.

Exploring Risks of Google Account Usage with Gemini-Cli and Gemini Pro Subscription
Gemini-Cli and your Gemini Pro subscription might pose some risks to your Google account. Here's what you need to know about potential vulnerabilities when using these AI tools.

ThornGuard: A Proxy Gateway to Secure MCP Server Connections from Prompt Injection
ThornGuard is a proxy that sits between MCP clients and upstream servers, scanning traffic for injection patterns, stripping PII, and logging to a dashboard. It was built after testing revealed vulnerabilities where servers could embed hidden instructions in tool responses.

Security Analysis of AI Agents Reveals Broken Trust Model and High Vulnerability Rates
A security analysis of AI agents shows the fundamental trust model is broken, with 49% of MCP packages having security findings and indirect injection achieving 36-98% attack success rates across state-of-the-art models.