Mod · Context
Privacy
Redacts detected secrets and chosen personal-data patterns before a request reaches the model.
Install
OMD+: installed and off by default. Manage it from /mods.
OMD Core: install it, then turn it on:
$ omd install omd_privacy$ omd mods enable omd_privacyWhat it does
- Uses stable placeholders, and refuses a request it can’t safely redact.
- Asks before shell commands read sensitive paths. Configure it with /privacy.
Capabilities
You approve these when you trust the mod, and again whenever its source changes.
approvalscommandsmiddlewarerequest_policystore
Settings
| Key | Values | Default |
|---|---|---|
secrets | array | ["private_key","aws_access_key","github_token","gitlab_token","slack_token","stripe_key","ai_api_key","google_api_key","npm_token","jwt","bearer_token","url_credentials","assigned_secret"] |
pii | array | [] |
scopes | array | ["prompt","context","tools","replies"] |
paths | ask · deny · off | ask |
sensitive_paths | array | [".env",".env.*","*.pem","*.key","*.p12","*.pfx","id_rsa*","id_dsa*","id_ecdsa*","id_ed25519*",".ssh/",".gnupg/",".aws/credentials",".docker/config.json",".kube/config",".netrc",".npmrc",".pypirc",".pgpass",".git-credentials"] |
exempt | array | ["path:.env.example","path:.env.sample","path:.env.template","path:*.pub"] |
unscanned | allow · deny | allow |