mcpbeat Sign in

Recording Skill for Claude

Demo/recording mode that redacts personally identifiable and sensitive information from Claude Code's outputs. Use when the user invokes /recording or says they are about to record, screen-share, or demo their Claude Code session and want PII scrubbed in real time.

1k tokens
context cost
the whole folder, loaded on every use
2
files
instructions only
0
copies elsewhere
how many repositories repackaged it
337
stars on the repo
on the repository, not the skill itself

Install

one command, takes just this skill from the repository
npx skills add https://github.com/glebis/claude-skills --skill recording

What comes with it

291 bytes besides the instruction
.claude-plugin/plugin.json

The instruction itself

8 sections, as written by the author

Recording Mode

Activate this mode when the user runs /recording or otherwise signals a demo/screen-share. Stay in this mode for the rest of the session unless the user says "stop recording", "/recording off", or equivalent.

Core rule

While recording mode is active, every user-visible output (chat text, code, file contents shown inline, tool result summaries, commit messages, file names invented for examples) MUST have sensitive content replaced with obviously fake placeholder data before it leaves the assistant.

This applies to text the model generates. It does NOT retroactively edit files on disk — only what the audience sees on screen. If asked to write redacted content to a file, do so explicitly; otherwise leave files alone.

What to redact

Replace these categories:

  • Names (people, partners, family, colleagues, clients) → Alex Doe, Jamie Roe, Sam Park
  • Handles / emails / phones / URLs with identifiers@demo_user, [email protected], +49 000 000 0000
  • Org / company / brand names (when private) → Acme Co, Globex
  • Locations — anything more specific than continent. City, neighborhood, street, venue, coordinates, IP-derived location → Some City, Main Street, Venue A. Even "Berlin" gets replaced if it could identify the user.
  • Dates — any real calendar date (birthdays, appointments, sessions, deadlines, deploy dates, transaction dates, file timestamps shown inline) → shift to placeholder dates like 2025-01-01, 2025-01-02. Keep relative ordering and weekday if it matters to the demo. Today's actual date should be replaced too if it appears in output.
  • Financial values (revenue, prices, salaries, invoice amounts) → round dummy numbers like €1,234 or $X,XXX
  • Medical info (diagnoses, medications, doses, symptoms, lab values) → [medication], [condition], [symptom]
  • Emotional / therapy / coaching content (feelings, session notes, DIMs/SIMs, relationship details) → [personal reflection]
  • Business info (deal terms, client lists, internal strategy, unreleased projects) → [business detail]
  • Credentials (tokens, keys, passwords, session IDs, file paths containing usernames) → sk-XXXX, /Users/demo/...
  • Genetic / health data specific to the user → [genetic marker]

When in doubt, redact. The cost of over-redaction in a demo is near zero; the cost of leaking is high.

Style of replacement

  • Use obviously dummy values, not plausible fakes that could be mistaken for real ones. Alex Doe not Andrey Volkov. Acme Co not Northwind Studio.
  • Keep replacements consistent within a session: the same real name maps to the same fake name every time, so the demo stays coherent. Maintain this mapping mentally for the duration of recording mode.
  • Preserve structure and length roughly so the demo still reads naturally (e.g. a real email becomes a fake email, not [REDACTED]).
  • Preserve technical accuracy of non-sensitive parts: code logic, library names, public APIs, framework terminology stay exact.

What NOT to redact

  • Public technical content: language keywords, public package names, public docs URLs, generic file names (README.md, package.json).
  • The user's own typed input — do not rewrite what they said, only what the assistant outputs.
  • Vault structure conventions and folder names that are already public knowledge from CLAUDE.md.

Tool calls

Tool calls themselves run normally — redaction is about what the assistant *says*. But:

  • When summarizing tool results back to the user, apply redaction to the summary.
  • When quoting file contents inline (e.g. showing a snippet of a daily note), redact the snippet.
  • Avoid reading sensitive files into the visible transcript unnecessarily — prefer to act on them silently and report a redacted summary.

Toggle behavior

/recording is a toggle. Calling it flips the current state:

  • If recording mode is OFF, /recording turns it ON. Reply with one short redacted line confirming it's on.
  • If recording mode is ON, /recording turns it OFF. Reply with one short line confirming it's off, then resume normal output.

Track the current state across the session. Natural-language equivalents also toggle: "I'm about to record" / "starting a demo" turn it on; "stop recording" / "demo done" / "you can stop redacting" turn it off. When in doubt about intent, infer from current state — if already recording and the user says "recording", they mean stop.

Self-check before sending

Before emitting any message while recording mode is active, scan the draft for:

  • Any proper noun that isn't a public technical term.
  • Any number that looks like money, age, dose, or measurement tied to the user.
  • Any path containing glebkalinin, Brains/brain, real folder names from People/, Daily/, etc.
  • Any emotional or medical vocabulary tied to a first-person subject.

If any hit, redact and re-check. Only then send.

Other skills for the same job

different authors, same section of the catalogue
Fhir Developer Skill
by anthropics
vendor ×1

> FHIR REST endpoints (Patient, Observation, Encounter, Condition, MedicationRequest), (2) Validating FHIR resources and returning proper HTTP status codes and error responses, (3) Implementing SMART on FHIR authorization and OAuth scopes, (4) Working with Bundles, transactions, batch operations, or search pagination. Covers FHIR R4 resource structures, required fields, value sets (status codes, gender, intent), coding systems (LOINC, SNOMED, RxNorm, ICD-10), and OperationOutcome error handling.

9k tokens scripts
Clawdirect
by ComeOnOliver
×1

Interact with ClawDirect, a directory of social web experiences for AI agents. Use this skill to browse the directory, like entries, or add new sites. Requires ATXP authentication for MCP tool calls. Triggers: browsing agent-oriented websites, discovering social platforms for agents, liking/voting on directory entries, or submitting new agent-facing sites to ClawDirect.

4k tokens
Audit Integrity
by github
vendor

Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry protocols, non-negotiable behaviors, self-reflection quality gates (1-10 scoring, ≥8 threshold), and a self-learning system with lesson/memory governance for security analysis agents.

4k tokens
Use Native Credential Proxy
by nanocoai

Opt out of the OneCLI gateway and supply Anthropic credentials from .env instead. For users who want simple .env-based credential management without the OneCLI agent vault. Reads the API key or OAuth token from .env and injects it into the container's API requests.

5k tokens scripts
Zoom General
by anthropics
vendor

Cross-product Zoom reference skill. Use after the workflow is clear when you need shared platform guidance, app-model comparisons, authentication context, scopes, marketplace considerations, or API-vs-MCP routing.

122k tokens
Vuln Scan
by anthropics
vendor

>- Static source-code vulnerability scan. Reads a target directory (and THREAT_MODEL.md if present), spawns parallel review subagents per focus area, and writes VULN-FINDINGS.json + .md for /triage to consume. Read-only — no building, running, or network. For execution-verified crashes, use vuln-pipeline instead. Use when asked to "scan for vulns", "review this code for security issues", "find bugs in <dir>", or as the step between /threat-model and /triage.

3k tokens
Hunt Session
by elementalsouls

Hunt Session Management vulnerabilities — session fixation (no regeneration on login), insufficient invalidation on logout / password-change / email-change, predictable or low-entropy session IDs, JWT-as-session with no exp/revocation, refresh-token rotation/reuse-detection gaps, OAuth/SSO session linkage, device-bound-session (DBSC) downgrade, and cookie attribute issues (Secure/HttpOnly/SameSite/__Host-). Validate with TWO real sessions (attacker A + victim B), body-diff every 200, and OOB confirmation for theft chains. Medium to Critical (fixation→admin hijack, no-invalidation→persistent ATO).

5k tokens
Doca Aes Gcm
by NVIDIA
vendor

> Use this skill when the user is doing hands-on DOCA AES-GCM work on a BlueField DPU or ConnectX NIC — configuring `doca_aes_gcm_task_encrypt` / `_task_decrypt`, querying `doca_aes_gcm_cap_*` for per-key-type (only `DOCA_AES_GCM_KEY_128` / `_256` — AES-192 not supported) and per-task support, sizing plaintext against the max-buf cap, setting source / destination mmap permissions, validating with a NIST GCMVS or RFC 5288 vector, or debugging DOCA_ERROR_* including the security-critical tag-verification-failed outcome on decrypt. Trigger even when the user does not explicitly mention "DOCA AES-GCM" or IO_FAILED", "auth tag isn't verifying", "NOT_PERMITTED on my encrypt buffer", "is AES-192-GCM on this BlueField" (no), or "encrypted record came back tampered". Refuse and route elsewhere for non-GCM AES modes (CBC / CTR / XTS — CPU OpenSSL), key management (KMS / HSM / rotation), SHA (doca-sha), or general AEAD background.

24k tokens

How to use it

Copy the folder

Take glebis/recording from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.