glebis/rehydrate
confide/skills/rehydrate/SKILL.md
Put the real values back into an analysis that was produced from GREEN (placeholder) text — LOCALLY, using the user's own reversible map. Completes the confide round-trip (redact -> cloud-analyze the green -> rehydrate locally). Use when the user says "rehydrate", "restore real names", "unmask the analysis", "put the names back", "de-redact this output", "reverse the placeholders", or hands you an analysis full of [CONFIDE_PERSON_0001]/[CONFIDE_DATE_0002] plus a *.map.json. Runs only on the user's own map; the map never leaves the machine; nothing fetched or transmitted. Prints counts only — never echoes restored PII. Warns on placeholders not in the map (possible LLM hallucination).
$ install --global
skillsauthnpx skillsauth add glebis/claude-skills rehydrateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 4, 2026, 2:10 AM357.7s2 files scanned
SKILL.md
- name:
- rehydrate
- description:
- Put the real values back into an analysis that was produced from GREEN (placeholder) text — LOCALLY, using the user's own reversible map. Completes the confide round-trip (redact -> cloud-analyze the green -> rehydrate locally). Use when the user says "rehydrate", "restore real names", "unmask the analysis", "put the names back", "de-redact this output", "reverse the placeholders", or hands you an analysis full of [CONFIDE_PERSON_0001]/[CONFIDE_DATE_0002] plus a *.map.json. Runs only on the user's own map; the map never leaves the machine; nothing fetched or transmitted. Prints counts only — never echoes restored PII. Warns on placeholders not in the map (possible LLM hallucination).
confide:rehydrate — restore real values into a placeholder analysis
This is the last step of the CONFIDE round-trip:
- Redact locally with
confide:anon(default reversible mode) → a GREEN copy with unique reserved-sentinel placeholders ([CONFIDE_PERSON_0001],[CONFIDE_EMAIL_0001],[CONFIDE_DATE_0002]…) plus a secret<name>.map.json(structured:green_sha256,entries[]…) that stays on the machine. - Analyze the GREEN text anywhere — including a cloud LLM. The analysis comes
back full of those same placeholders (sometimes mangled to
CONFIDE_PERSON_0001,[CONFIDE PERSON 0001]… — but always keeping the fullCONFIDE_TYPE_NNNNcore). - Rehydrate here: replace every placeholder with its original value from your own map, producing the real analysis — without the cloud ever seeing the originals.
Privacy invariants (do not violate)
- Local-only, on the user's OWN map. The map never leaves the machine. This skill never fetches or transmits anything.
- Counts only on stdout. The summary reports
restored N, unmatched M. The restored text (which contains originals) is written to a local file; it is NEVER echoed to stdout beyond the counts. - Unmatched = possible hallucination. A placeholder that is not in the map is
reported as
unmatchedand left in place — we never invent a value for it. Warn the user that these may be LLM hallucinations. - The
<name>.restored.mdoutput contains originals: it is local-only, do not share or commit it.
Run it
python3 skills/rehydrate/scripts/rehydrate.py ANALYSIS_FILE [--map <name>.map.json]
ANALYSIS_FILE— the text/analysis containing placeholders.--map <name>.map.json— the secret map fromconfide:anon. If omitted, the sibling*.map.jsonis auto-found (e.g. an analysis next tosession.map.json, or one derived fromsession.green.md).--out PATH— output path (default:<name>.restored.mdnext to the input).--verify-green <green_file>— check the map'sgreen_sha256against that GREEN file; warns loudly if they don't match (wrong map for this document).
Robust to LLM mangling that still keeps the full CONFIDE_TYPE_NNNN core:
[CONFIDE_PERSON_0001], [CONFIDE PERSON 0001], CONFIDE_PERSON_0001, and
confide_person_0001 all restore to the same map entry. Ordinary prose lacking the
CONFIDE prefix (e.g. "Person 1", "patient 1", "section 2") is never touched, and
0001 never eats 0010. Rehydration is idempotent (re-running on restored text is a
no-op). Accepts both the structured map schema and a legacy flat map.
After running
- Report the restore summary (
restored N, unmatched M) — never paste PII. - If
unmatched > 0, flag the placeholders as possible hallucinations not in the map. - Remind the user the
*.restored.mdis local-only (it now contains originals).
Related Skills
glebis/release
documentation
VerifiedTrustedCommunity
Cut a software release and maintain a tiered compatibility policy. Use when the user wants to release, ship a version, bump the version, tag a release, write a changelog, or update COMPATIBILITY. Config-driven via release.config.json; bumps version files, runs a readiness gate, updates COMPATIBILITY.md tiers and deprecations, tags (→ release workflow), and reports closed issues. Teaches the underlying standards as it runs.
242SKILL.mdUpdated Jun 4, 2026
glebis/library-sync
development
VerifiedTrustedCommunity
Sync and manage bilingual (EN/RU) library content for agency-docs. Use when adding, updating, or reviewing library articles. Handles translation, sync checks, and Russian stylistic review.
242SKILL.mdUpdated Jun 4, 2026
glebis/job-babysitter
development
VerifiedTrustedCommunity
This skill should be used to watch a long-running background job (ffmpeg/media encode, qmd or other embedding/vector-DB run, batch agent/LLM pipeline, or a real-browser/agent-browser daemon) until it finishes or wedges, then deliver a verdict (done, needs-attention, or blocked) plus the exact next command, without burning dozens of manual poll commands. Triggers on "babysit this job", "watch this until it's done", "ping me when the encode/embed/batch finishes", "is this background process stuck", "monitor this ffmpeg/qmd run", or any request to wait on a long-running process and be told when it's complete or hung.
242SKILL.mdUpdated Jun 4, 2026
glebis/peer-agent-collaboration
development
VerifiedTrustedCommunity
Use when the user wants Claude Code, Codex, or other AI coding/business agents to work together as peers. This skill should be used whenever the user mentions coordinating Claude Code and Codex, agent handoffs, multi-agent workflows, parity, respect, pushback between agents, deciding which agent should lead, or turning a business/code workflow into a two-agent operating model.
242SKILL.mdUpdated Jun 4, 2026