Redacta: An OpenClaw Skill That Pseudonymises Clinical Text Before It Reaches an LLM

✍️ OpenClawRadar📅 Published: August 9, 2026🔗 Source
Redacta: An OpenClaw Skill That Pseudonymises Clinical Text Before It Reaches an LLM
Ad

If you're building an AI agent that processes clinical text, you're likely worrying about PHI leaking to an external model. Redacta, a new OpenClaw skill, tackles that head-on by pseudonymising identifiers before they leave your environment.

What Redacta does

Instead of simply deleting identifiers (which destroys context), Redacta replaces them with consistent pseudonyms. For example:

John Smith → PERSON_001

Repeated references stay consistent throughout the document, and the mapping can be used later to restore the original text if needed. This preserves useful context while keeping patient data local.

Key features from the source

  • Detects names, dates, contact details, and medical record numbers (MRNs).
  • Replaces with deterministic pseudonyms like PERSON_001 — not a generic [NAME].
  • Mapping allows round-trip restoration of original text.
  • Runs entirely locally — no identifiable data sent to an external model.
  • Open source and packaged as an OpenClaw skill.
  • Passed 1,400 downloads on ClawHub.
Ad

Why this matters for agent workflows

When you send clinical text to an LLM API, you're exposing whatever's in that text. Redacta lets you transform the data first, so the model only sees pseudonyms. For developers in healthcare or anywhere that handles sensitive PII/PHI, this is a practical way to add a privacy layer to your agent pipeline.

Redacta is available on ClawHub and the source is on GitHub.

If you've been hand-rolling regex to strip identifiers or relying on external scrubbing services, check it out. The consistent pseudonym approach is a middle ground between full redaction and raw text.

📖 Read the full source: r/openclaw

Ad

👀 See Also

Blindfold: A Plugin That Prevents Claude Code from Reading Your .env Files
Security

Blindfold: A Plugin That Prevents Claude Code from Reading Your .env Files

Blindfold is a new plugin that prevents Claude Code from accessing actual secret values in .env files by keeping them in the OS keychain and using placeholders like {{STRIPE_KEY}}, with hooks that block direct access attempts.

OpenClawRadar
OpenClaw SOC Agent Integration for SIEM Home Lab Threat Hunting
Security

OpenClaw SOC Agent Integration for SIEM Home Lab Threat Hunting

A Reddit user shares their open-source SIEM setup called Red Threat Redemption on Debian 13, integrating Elasticsearch, Kibana, Wazuh, Zeek, and pfSense with Suricata, then adds an AI agent for automated threat correlation, hunting, and alert triage.

OpenClawRadar
Architectural fix for AI agent over-centralization: separating memory, execution, and outbound actions
Security

Architectural fix for AI agent over-centralization: separating memory, execution, and outbound actions

A developer realized their AI assistant was becoming an 'internal autocrat' by handling long-term memory, tool access, and autonomous decisions in one component. The solution involved separating the system into three roles: private controller, scoped workers, and outbound gate.

OpenClawRadar
Mass NPM & PyPI Supply Chain Attack Hits TanStack, Mistral AI, and 170+ Packages
Security

Mass NPM & PyPI Supply Chain Attack Hits TanStack, Mistral AI, and 170+ Packages

A coordinated attack compromised 170+ npm packages and 2 PyPI packages, targeting TanStack (42 packages), Mistral AI SDKs, UiPath, OpenSearch, and Guardrails AI. Malicious versions execute a dropper that exfiltrates credentials and probes cloud metadata.

OpenClawRadar