Skill: mindbomber/aana-data-export-guardrail-skill (version 1.0.0)

# AANA Data Export Guardrail Skill Use this skill before an OpenClaw-style agent exports, downloads, shares, syncs, copies, uploads, emails, or publishes files, records, datasets, reports, logs, messages, or account data. This is an instruction-only skill. It does not install packages, run commands, write files, call services, persist memory, or export data on its own. ## Core Principle Data export should be narrow, authorized, necessary, privacy-safe, and reversible where possible. Broad or sensitive exports require explicit approval and review. ## Required Checks - exact dataset, files, records, fields, date range, and recipient/destination - reason the export is necessary - private data, secrets, personal data, customer data, logs, account records, and regulated information - authorization, ownership, and sharing permission - format, redaction, retention, and deletion expectations - whether a smaller summary, aggregate, or filtered export is enough ## Export Risk Classes Treat these as higher risk: - bulk exports, cross-account exports, full inboxes, full logs, full databases, all records, and wildcard file exports, - external destinations, public links, shared drives, vendor uploads, email attachments, and third-party sync targets, - personal data, customer records, payment data, health/legal/financial data, HR/student records, secrets, credentials, and incident logs, - exports with unclear retention, deletion, access control, or audit requirements. ## Scope And Minimization Rules Do not export more than the task requires. Prefer field-level filtering, date ranges, aggregates, redacted summaries, or counts when full records are unnecessary. Ask before broad, recursive, bulk, cross-account, external, public, or regulated exports. ## Destination And Retention Rules Verify who will receive the export, where it will be stored, how long it should persist, and whether the user has authority to share it. If retention is unknown, ask before exporting sensitive data. ## Review Payload When using a configured AANA checker, send only a minimal redacted review payload: - `export_type` - `scope_status` - `destination_status` - `privacy_status` - `approval_status` - `export_risks` - `blocker_reason` - `safe_alternative` - `recommended_action` Do not include full records, secrets, logs, customer data, account records, or unrelated private data when a redacted summary is enough. ## Decision Rule - If export is narrow, necessary, authorized, and privacy-safe, proceed. - If scope, recipient, fields, or purpose are unclear, ask. - If sensitive data is included, redact, narrow, or route to review. - If broad, bulk, cross-account, or external export is requested, require approval. - If export is unauthorized, excessive, or privacy-violating, block. ## Output Pattern ```text AANA data export gate: - Export: files / records / dataset / logs / report / messages / account_data - Scope: narrow / broad / bulk / cross_account / unknown - Destination: local / user / external / public / unknown - Privacy: clear / needs_redaction / sensitive / regulated - Approval: approved / required / unclear / denied - Decision: proceed / narrow / ask / redact / request_approval / route_to_review / block ```

path: manifest.json
content: {
  "name": "aana-data-export-guardrail",
  "slug": "aana-data-export-guardrail",
  "version": "0.1.0",
  "type": "instruction_only_skill",
  "description": "AANA-grounded data export guardrail instructions for checking files, records, datasets, reports, logs, and user data before export or sharing.",
  "entrypoint": "SKILL.md",
  "bundled_code": false,
  "installs_dependencies": false,
  "executes_commands": false,
  "writes_files": false,
  "writes_event_files": false,
  "persists_memory": false,
  "requires_export_scope_check": true,
  "requires_destination_check": true,
  "requires_private_data_check": true,
  "requires_export_approval": true,
  "data_export_boundary": {
    "must_verify_exact_export_scope": true,
    "must_check_destination_and_recipient": true,
    "must_minimize_exported_fields": true,
    "must_redact_sensitive_data": true,
    "must_block_unauthorized_or_excessive_exports": true
  },
  "aana_boundary": {"checker_bundled": false, "checker_required": false},
  "schemas": ["schemas/data-export-guardrail.schema.json"],
  "examples": ["examples/redacted-data-export-guardrail.json"]
}


path: README.md
content: # AANA Data Export Guardrail Skill

Marketplace slug:

```text
aana-data-export-guardrail
```

Checks export scope, destination, privacy, redaction, and approval before files, records, datasets, logs, or account data are exported or shared.

This package is instruction-only. It does not execute code, export data, call services, write files, persist memory, or install dependencies.


path: schemas/data-export-guardrail.schema.json
content: {
  "title": "AANA Data Export Guardrail",
  "type": "object",
  "required": ["export_type", "scope_status", "destination_status", "privacy_status", "approval_status", "recommended_action"],
  "properties": {
    "export_type": {"type": "string", "enum": ["files", "records", "dataset", "logs", "report", "messages", "account_data"]},
    "scope_status": {"type": "string", "enum": ["narrow", "broad", "bulk", "cross_account", "unknown"]},
    "destination_status": {"type": "string", "enum": ["local", "user", "external", "public", "unknown"]},
    "privacy_status": {"type": "string", "enum": ["clear", "needs_redaction", "sensitive", "regulated"]},
    "approval_status": {"type": "string", "enum": ["approved", "required", "unclear", "denied"]},
    "export_risks": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": ["bulk_export", "cross_account", "external_destination", "public_link", "regulated_data", "secrets", "unclear_retention", "excessive_fields", "unknown"]
      }
    },
    "blocker_reason": {"type": "string"},
    "safe_alternative": {"type": "string"},
    "recommended_action": {"type": "string", "enum": ["proceed", "narrow", "ask", "redact", "request_approval", "route_to_review", "block"]}
  },
  "additionalProperties": false
}


path: examples/redacted-data-export-guardrail.json
content: {
  "export_type": "records",
  "scope_status": "bulk",
  "destination_status": "external",
  "privacy_status": "sensitive",
  "approval_status": "required",
  "export_risks": [
    "bulk_export",
    "external_destination",
    "regulated_data",
    "unclear_retention"
  ],
  "blocker_reason": "The export is bulk, sensitive, externally destined, and lacks retention guidance.",
  "safe_alternative": "Export a redacted aggregate summary or ask for scoped fields, destination, approval, and retention instructions.",
  "recommended_action": "route_to_review"
}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)