# Sentryskills Output

> Execute privacy and sensitive leakage guarding before output. As long as context contains sensitive information, must trigger this skill even if user only requests explanation/summary. Default to downgrade expression for tool conclusions not multi-source verified.

- **Type:** Skill
- **Install:** `agentstack add skill-ai45lab-sentryskills-sentryskills-output`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [AI45Lab](https://agentstack.voostack.com/s/ai45lab)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [AI45Lab](https://github.com/AI45Lab)
- **Source:** https://github.com/AI45Lab/SentrySkills/tree/main/sentryskills-output

## Install

```sh
agentstack add skill-ai45lab-sentryskills-sentryskills-output
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# SentrySkills Output Privacy Guard

## Role

As mandatory gate before final output to prevent "explanatory answer leakage."

## Input

1. Text to be output
2. sensitivity_state
3. trust_annotations
4. Whether multi-source verification completed

## Output

1. `leakage_detected`
2. `redaction_applied`
3. `confidence_level`
4. `safe_response`
5. `output_decision` (allow|downgrade|block)
6. `output_rule_action` and optional `output_model_action`

## Mandatory Checks

1. Credentials, keys, privacy fields
2. Restatement and reconstruction leakage of sensitive context
3. Whether single-source tool conclusions are over-deterministically expressed
4. Multi-source verification status

## Disposition Rules

1. Sensitive leakage detected: redact or `block`.
2. Multi-source verification not completed: `downgrade`, output uncertainty notice.
3. Multi-source consistent and no sensitive leakage: can `allow`.
4. Output rules run before output model analysis; model results may tighten but not relax rule decisions.
5. Prompt-injection phrases in output text are not blocking by themselves unless they create leakage, unsafe reconstruction, or executable dangerous content.

## Output Template

```markdown
## Output Guard Result
- output_decision: 
- leakage_detected: 
- redaction_applied: 
- confidence_level: 
- safe_response: 
```

## Recommended Script Calls

1. If `trust_annotations` contains single-tool source conclusions, first call `../shared/scripts/verify_multi_source_template.py`.
2. When conclusion has not reached `multi_source_verified`, `output_decision` should not default to `allow`.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [AI45Lab](https://github.com/AI45Lab)
- **Source:** [AI45Lab/SentrySkills](https://github.com/AI45Lab/SentrySkills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-ai45lab-sentryskills-sentryskills-output
- Seller: https://agentstack.voostack.com/s/ai45lab
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.