bubble-shield — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bubble-shield (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A privacy guard for Claude Cowork / Claude Code. It stops the AI from reading your raw client files until the identifying data has been replaced with anonymous labels — locally, reversibly, and with no data leaving your machine.
Built for financial advisors (CGP/CIF) and anyone who works with client documents in an AI assistant. 100 % local, no network, no account, no telemetry.
vdk888/bubble-shield-publicThat’s it — no GitHub account needed (this is a public repository), and it runs fully offline afterwards.
/plugin marketplace add vdk888/bubble-shield-public
/plugin install bubble-shield@bubble-shieldPreToolUse hook) blocks Claude from reading any file inside afolder you’ve marked as protected — drop a .bubble-shield.json marker into a client folder and everything in it becomes the coffre.
/bubble-shield:bubble-shield-anonymize skill) turns adossier into anonymised copies the AI can safely work on, then de-anonymises the answer locally.
UserPromptSubmit hook) nudges you if raw client data ispasted directly into the chat.
Everything is self-contained — the engine and a pure-python PDF reader are bundled, so there is nothing to pip install. PDFs, Word (.docx), and plain text all work out of the box, offline.
New here? Just ask Claude “how does Bubble Shield work / help me set it up” — the bundled onboarding skill walks you through it in plain language.
Pseudonymisation is local and reversible — a security measure under RGPD art. 25 & 32. The token↔value vault never leaves your machine. This tool does not replace your DPA / AIPD or human review; see the plugin’s README and RELEASING for details.
MIT — see the plugin folder.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.