Individual skill

dlp-pro

Design data loss prevention — data discovery, classification, policy enforcement across endpoint, network, and cloud.

skills/dlp-pro/SKILL.md

Read pinned source

Source commit faf37c0859ebf627bfcb5225e8057d088691e0ae

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
No
Repository scan complete
No
Skill scan complete
No
Observed behavior
Not checked yet
Last checked
Nov 8, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
56
Repository last updated
Oct 10, 2026
License
MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

## Overview

DLP protects data in use, in motion, and at rest: discovering where sensitive data lives, classifying it, and enforcing policies that prevent exfiltration — accidental or malicious. It is one of the highest-friction security controls when done badly (blocking legitimate work) and one of the most valuable when done well (catching the spreadsheet emailed to a personal account at 11 PM).

This skill covers the pragmatic DLP program: discovery and classification first, policy design that respects workflows, phased enforcement, and tuning that keeps false positives from destroying credibility.

DLP without classification is just blocking keywords: start by knowing what data you have and where it lives. The discovery phase — scanning file shares, endpoints, and cloud storage for PII, credentials, and IP — usually surprises everyone and justifies the entire program before a single block policy exists.

## When to use

- Preventing exfiltration of PII, credentials, source code, or regulated data.
- Meeting compliance requirements for data protection (GDPR, PCI DSS, HIPAA).
- Responding to insider-threat concerns or past exfiltration incidents.
- Building the data-classification program that DLP depends on.
Back to top