Protects data itself rather than the systems around it — classifying what you hold, encrypting in transit and at rest and understanding what each actually defends against, managing keys and their…
$ npx skills add cbrock84/headcount --skill data-protection-and-encryption -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install cbrock84/headcount data-protection-and-encryption --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/security/skills/data-protection-and-encryption .claude/skills/data-protection-and-encryption && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "data-protection-and-encryption" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/security/skills/data-protection-and-encryption into .claude/skills/data-protection-and-encryption/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "data-protection-and-encryption", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/cbrock84/headcount/tree/main/plugins/security/skills/data-protection-and-encryptionType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add cbrock84/headcount --skill data-protection-and-encryption -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install cbrock84/headcount data-protection-and-encryption --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .agents/skills && cp -r skills-src/plugins/security/skills/data-protection-and-encryption .agents/skills/data-protection-and-encryption && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "data-protection-and-encryption" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/security/skills/data-protection-and-encryption into .agents/skills/data-protection-and-encryption/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "data-protection-and-encryption", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cbrock84/headcount --skill data-protection-and-encryption -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install cbrock84/headcount data-protection-and-encryption --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/plugins/security/skills/data-protection-and-encryption .cursor/skills/data-protection-and-encryption && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "data-protection-and-encryption" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/security/skills/data-protection-and-encryption into .cursor/skills/data-protection-and-encryption/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "data-protection-and-encryption", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/cbrock84/headcount.git --path plugins/security/skills/data-protection-and-encryption--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add cbrock84/headcount --skill data-protection-and-encryption -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install cbrock84/headcount data-protection-and-encryption --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/plugins/security/skills/data-protection-and-encryption .gemini/skills/data-protection-and-encryption && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "data-protection-and-encryption" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/security/skills/data-protection-and-encryption into .gemini/skills/data-protection-and-encryption/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "data-protection-and-encryption", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install cbrock84/headcount data-protection-and-encryptionInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add cbrock84/headcount --skill data-protection-and-encryption -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .github/skills && cp -r skills-src/plugins/security/skills/data-protection-and-encryption .github/skills/data-protection-and-encryption && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "data-protection-and-encryption" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/security/skills/data-protection-and-encryption into .github/skills/data-protection-and-encryption/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "data-protection-and-encryption", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cbrock84/headcount --skill data-protection-and-encryption -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install cbrock84/headcount data-protection-and-encryption --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/plugins/security/skills/data-protection-and-encryption .opencode/skills/data-protection-and-encryption && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "data-protection-and-encryption" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/security/skills/data-protection-and-encryption into .opencode/skills/data-protection-and-encryption/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "data-protection-and-encryption", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
data-protection-and-encryptionProtects data itself rather than the systems around it — classifying what you hold, encrypting in transit and at rest and understanding what each actually defends against, managing keys and their…
Data Protection And Encryption is an agent skill from cbrock84/headcount. Protects data itself rather than the systems around it — classifying what you hold, encrypting in transit and at rest and understanding what each actually defends against, managing keys and their rotation, handling secrets in applications and pipelines, minimizing and de-identifying, and deleting on purpose. Use this to design data protection for a system, assess an encryption claim, set up key or secret management, or work out what a stolen backup would actually expose.
Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/sources.md`).
It sits in Legal & Compliance, covering Privacy and GDPR, Cryptography and Secrets management. The repository describes itself as: An agent organization structured as a company — 15+ departments, 125+ skills, each independently installable, citing the standards and regulators that settle the question. Runs… The licence is MIT.
Read from SKILL.md and the folder at commit 98d1c17. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Data Protection And Encryption loads about 1.3k tokens when it runs, and up to ~1.7k if it reads all its reference files. Until then it costs about 127 tokens; SKILL.md has 678 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from cbrock84/headcount at commit 98d1c17, republished under its MIT licence (© cbrock84). 678 words, ~1,266 tokens.
.claude/skills/data-protection-and-encryption/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.Perimeter and identity controls protect access to data. These controls protect the data when those have already failed, which is the scenario worth designing for.
A short scale beats a detailed one — three or four levels that people can apply without a manual. What matters is that each level carries concrete handling rules: where it may be stored, who may access it, whether it may leave the environment, and how long it is kept.
Find it before you classify it. Sensitive data is rarely only where the architecture says it is: it accumulates in exports, analytics environments, test databases seeded from production, support tickets, and log files.
This is where claims get made loosely and expectations diverge from reality.
Choose deliberately. "Encrypted at rest" as a blanket assurance usually means the first of these, and answers far less than the person asking believes.
Encryption moves the problem to key management; it does not remove it. A key stored beside the data it protects provides documentation, not protection.
Application secrets — database passwords, API keys, service tokens — belong in a secret manager, injected at runtime, scoped narrowly, and rotated on a schedule and on staff departure.
Scan for committed secrets in CI and pre-commit, and treat any secret that has ever reached a repository as compromised. Removing the commit does not un-publish it; rotation is the only remediation.
The most reliable protection is not holding the data.
references/sources.md in this skill lists the outside authorities that settle the questions
here — what each one is authoritative for, and what you may do with it. Check them before
answering on anything they cover, and cite what you used. Most are free to read and not free
to reproduce; the use note on each is binding.
© cbrock84, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 1 other file (references) in plugins/security/skills/data-protection-and-encryption of cbrock84/headcount.
Open the folder on GitHubat commit 98d1c17
Data Protection And Encryption next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Data Protection And Encryption this skillcbrock84/headcount | 2k | — | ~1.3k | Automated safety check: Pass | MIT | |
| Implementing Hashicorp Vault Dynamic Secretsmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~5.2k | Automated safety check: Pass | Apache-2.0 | |
| Implementing Homomorphic Encryptionmukul975/Privacy-Data-Protection-Skills | 297 | — | ~2.2k | Automated safety check: Pass | Apache-2.0 | |
| Pseudonymization Riskmukul975/Privacy-Data-Protection-Skills | 297 | — | ~3.2k | Automated safety check: Pass | Apache-2.0 | |
| Selecting Privacy Enhancing Technologiesmukul975/Privacy-Data-Protection-Skills | 297 | — | ~2.6k | Automated safety check: Pass | Apache-2.0 | |
| Supplementary Measuresmukul975/Privacy-Data-Protection-Skills | 297 | — | ~3.8k | Automated safety check: Pass | Apache-2.0 |
mukul975/Anthropic-Cybersecurity-Skills
Configures HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates, with automatic generation, lease management, and rotation to eliminate static secrets…
mukul975/Privacy-Data-Protection-Skills
Guide to implementing homomorphic encryption for privacy-preserving computation under GDPR.
mukul975/Privacy-Data-Protection-Skills
Assessment of pseudonymization techniques and re-identification risk.
mukul975/Privacy-Data-Protection-Skills
Comprehensive PET selection guide covering differential privacy, homomorphic encryption, secure multi-party computation, federated learning, zero-knowledge proofs, and trusted execution environments.
mukul975/Privacy-Data-Protection-Skills
Guides implementation of technical, contractual, and organisational supplementary measures for international data transfers per EDPB Recommendations 01/2020.
BagelHole/DevOps-Security-Agent-Skills
Manage secrets and PKI with HashiCorp Vault. An agent skill from BagelHole/DevOps-Security-Agent-Skills.
cbrock84/headcount
Designs orchestrator-and-subagent hierarchies for a repository — splitting agents by exclusive write surface, pairing every producer with an independent auditor, and enforcing the split with a…
cbrock84/headcount
Designs and audits who can reach what — authentication, authorization models, privileged access, service credentials, and joiner-mover-leaver process.
cbrock84/headcount
Concentrates marketing and sales effort on a named set of accounts rather than on volume — qualifying whether the model fits your economics at all, building the account list and the buying group…
cbrock84/headcount
Gets new users from signup to first real value — signup flow, onboarding, time-to-value, and the early experience that determines whether someone becomes a user or a lapsed account.
cbrock84/headcount
Governs models and AI systems in production — intended use, evaluation, monitoring, human oversight, documentation, and the decision to deploy or retire.
cbrock84/headcount
Produces executive-level research — market sizing, competitor mapping, trend analysis, and strategic intelligence — grounded in cited sources with the confidence in each claim made explicit.
Categories
Protects data itself rather than the systems around it — classifying what you hold, encrypting in transit and at rest and understanding what each actually defends against, managing keys and their…. Data Protection And Encryption is an agent skill from cbrock84/headcount. Protects data itself rather than the systems around it — classifying what you hold, encrypting in transit and at rest and understanding what each actually defends against, managing keys and their rotation, handling secrets in applications and pipelines, minimizing and de-identifying, and deleting on purpose.
Data Protection And Encryption fits situations like: tasks that involve Privacy and GDPR; tasks that involve Cryptography; tasks that involve Secrets management.
Run `npx skills add cbrock84/headcount --skill data-protection-and-encryption -a claude-code`. Or copy the skill folder (plugins/security/skills/data-protection-and-encryption in cbrock84/headcount) into .claude/skills/data-protection-and-encryption in your project. Claude Code loads it when a task matches its description.
Run `npx skills add cbrock84/headcount --skill data-protection-and-encryption -a codex`. Or copy the skill folder (plugins/security/skills/data-protection-and-encryption in cbrock84/headcount) into .agents/skills/data-protection-and-encryption in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cbrock84/headcount --skill data-protection-and-encryption -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/data-protection-and-encryption, .gemini/skills/data-protection-and-encryption, .github/skills/data-protection-and-encryption and .opencode/skills/data-protection-and-encryption in your project.
SKILL.md names no scripts, command-line tools or credentials: Data Protection And Encryption is instructions for the agent only.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Data Protection And Encryption is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.3k tokens (SKILL.md is roughly 5.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 453 tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Data Protection And Encryption: Implementing Hashicorp Vault Dynamic Secrets (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Implementing Homomorphic Encryption (mukul975/Privacy-Data-Protection-Skills, 297 stars), Pseudonymization Risk (mukul975/Privacy-Data-Protection-Skills, 297 stars) and Selecting Privacy Enhancing Technologies (mukul975/Privacy-Data-Protection-Skills, 297 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
cbrock84 (a GitHub user) maintains it in cbrock84/headcount, which has 2,016 GitHub stars. The repository holds 178 skills in this directory. The repository was last updated on September 17, 2026.
Source: cbrock84/headcount on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
