From founder-os
Check whether data is safe to share with an external tool. Say "is this safe to paste", "can I send this to <tool>", or "classify this data". Fires before pasting, uploading, forwarding, or sending data to an external tool or AI model. Classifies the data and checks it against the user's data-handling policy.
How this skill is triggered — by the user, by Claude, or both
Slash command
/founder-os:data-securityThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Runs on: reasoning - reads your files and reasons; any capable agent can run this.
Runs on: reasoning - reads your files and reasons; any capable agent can run this.
Block unsafe data movement before it leaves the user's control.
Read the first available policy source. Skip a source silently if it does not exist; do not error out.
rules/data-handling.md (likely absent on a fresh install - skip if missing)rules/approval-gates.md (or fall back to templates/rules/approval-gates.md)stack.json (lists which tools the user has approved)context/clients.md (per-client restrictions, if any are noted)If none of the above exist or yield a policy, use the default matrix below and tell the user it is a fallback.
| Class | Examples | Default Tool Access |
|---|---|---|
| Public | Published posts, public pages, public case studies | Any tool |
| Internal | SOPs, internal notes, non-sensitive business plans | Paid tools with business terms |
| Client general | Client name, project scope, public deal existence | Tools with no-training terms or business agreement |
| Client sensitive | Strategy, financials, private messages, personal data | Approved tools only |
| Regulated | Health, legal, banking, tax, ID, payroll, protected personal data | Specific approved systems only |
If ambiguous, choose the more restrictive class.
| Tool Class | Examples | Allowed Data |
|---|---|---|
| Approved secure | Enterprise or API tools listed in the user's policy | Up to the policy limit |
| Business paid | Paid tools with no-training or business terms | Public, internal, client general if policy allows |
| Consumer or free | Free chat tools, unapproved browser tools | Public only |
| Unknown | Anything not listed | Public only |
ALLOW, REDACT FIRST, or BLOCK.BLOCK, name a safer tool or a local-only path.Data class: <class>
Tool class: <class>
Call: ALLOW | REDACT FIRST | BLOCK
Reason: <one sentence>
Safe path: <tool or local action>
Do not silently redact and proceed. Show what type of information must be removed, then ask the user to confirm the redacted version before using it.
Provides UI/UX resources: 50+ styles, color palettes, font pairings, guidelines, charts for web/mobile across React, Next.js, Vue, Svelte, Tailwind, React Native, Flutter. Aids planning, building, reviewing interfaces.
Fetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.
npx claudepluginhub arcassystems/founderos --plugin founder-os