Redacta: An OpenClaw Skill That Pseudonymises Clinical Text Before It Reaches an LLM
If you're building an AI agent that processes clinical text, you're likely worrying about PHI leaking to an external model. Redacta, a new OpenClaw skill, tackles that head-on by pseudonymising identifiers before they leave your environment.
What Redacta does
Instead of simply deleting identifiers (which destroys context), Redacta replaces them with consistent pseudonyms. For example:
John Smith → PERSON_001Repeated references stay consistent throughout the document, and the mapping can be used later to restore the original text if needed. This preserves useful context while keeping patient data local.
Key features from the source
- Detects names, dates, contact details, and medical record numbers (MRNs).
- Replaces with deterministic pseudonyms like
PERSON_001— not a generic[NAME]. - Mapping allows round-trip restoration of original text.
- Runs entirely locally — no identifiable data sent to an external model.
- Open source and packaged as an OpenClaw skill.
- Passed 1,400 downloads on ClawHub.
Why this matters for agent workflows
When you send clinical text to an LLM API, you're exposing whatever's in that text. Redacta lets you transform the data first, so the model only sees pseudonyms. For developers in healthcare or anywhere that handles sensitive PII/PHI, this is a practical way to add a privacy layer to your agent pipeline.
Redacta is available on ClawHub and the source is on GitHub.
If you've been hand-rolling regex to strip identifiers or relying on external scrubbing services, check it out. The consistent pseudonym approach is a middle ground between full redaction and raw text.
📖 Read the full source: r/openclaw
👀 See Also
OpenClaw Security Approach Using LLM Router and zrok Private Sharing
A developer shares their approach to running OpenClaw and an LLM router inside a VM+Kubernetes environment with a single command, addressing security concerns by injecting API keys at the router level and using zrok for private sharing instead of traditional messaging app tokens.
OpenClaw SOC Agent Integration for SIEM Home Lab Threat Hunting
A Reddit user shares their open-source SIEM setup called Red Threat Redemption on Debian 13, integrating Elasticsearch, Kibana, Wazuh, Zeek, and pfSense with Suricata, then adds an AI agent for automated threat correlation, hunting, and alert triage.
Offline SBOM Verifier for OpenClaw Detects Poisoned Skills in Under 0.2 Seconds
A developer built an offline SBOM verification tool in Rust that caught a poisoned OpenClaw skill exfiltrating SSH keys, with verification completing in less than 0.2 seconds without internet access.
OpenObscure: Open-Source On-Device Privacy Firewall for AI Agents
OpenObscure is an open-source, on-device privacy firewall that sits between AI agents and LLM providers. It uses FF1 Format-Preserving Encryption with AES-256 to encrypt PII values before requests leave your device, maintaining data structure while protecting privacy.