wehub-resource-sync
0d3cb498a3
CI / Shell Format Check (push) Has been cancelled
CI / Check Ruby (3.4) (push) Has been cancelled
CI / CI Config (push) Has been cancelled
CI / Test on Node ${{ matrix.node }} and ${{ matrix.os }}${{ matrix.shard && format(' (shard {0}/3)', matrix.shard) || '' }} (push) Has been cancelled
CI / Build on Node ${{ matrix.node }} (push) Has been cancelled
CI / Style Check (push) Has been cancelled
CI / Generate Assets (push) Has been cancelled
CI / Check Python (3.14) (push) Has been cancelled
CI / Check Python (3.9) (push) Has been cancelled
CI / Build Docs (push) Has been cancelled
CI / Code Scan Action (push) Has been cancelled
CI / Site tests (push) Has been cancelled
CI / webui tests (push) Has been cancelled
CI / Run Integration Tests (push) Has been cancelled
CI / Run Smoke Tests (push) Has been cancelled
CI / Go Tests (push) Has been cancelled
CI / Share Test (push) Has been cancelled
CI / Redteam (Production API) (push) Has been cancelled
CI / Redteam (Staging API) (push) Has been cancelled
CI / GitHub Actions Lint (push) Has been cancelled
CI / Check Ruby (3.0) (push) Has been cancelled
release-please / release-please (push) Has been cancelled
release-please / build (push) Has been cancelled
release-please / publish-npm (push) Has been cancelled
release-please / publish-npm-backfill (push) Has been cancelled
release-please / docker (push) Has been cancelled
release-please / publish-code-scan-action (push) Has been cancelled
release-please / attest-code-scan-action (push) Has been cancelled
Deploy local.promptfoo.app / Deploy to Cloudflare Pages (push) Has been cancelled
Test and Publish Multi-arch Docker Image / test (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-amd64 platform:linux/amd64 runner:ubuntu-latest]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-arm64 platform:linux/arm64 runner:ubuntu-24.04-arm]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / merge-docker-digests (push) Has been cancelled
Test and Publish Multi-arch Docker Image / Attest Multi-arch Image (push) Has been cancelled
Validate Renovate Config / Validate Renovate Configuration (push) Has been cancelled
56 lines
1.7 KiB
Markdown
56 lines
1.7 KiB
Markdown
---
|
|
sidebar_label: PII Leak
|
|
description: Red team PII data leakage by simulating direct disclosure, session leaks, and social engineering attacks to protect sensitive personal information in AI systems
|
|
---
|
|
|
|
# PII Plugin
|
|
|
|
The PII (Personally Identifiable Information) plugin tests an AI system's ability to protect sensitive personal data. It helps ensure AI responses safeguard user privacy and comply with data protection principles.
|
|
|
|
## Configuration
|
|
|
|
Include the PII plugin in your LLM red teaming setup:
|
|
|
|
```yaml
|
|
redteam:
|
|
plugins:
|
|
- pii
|
|
```
|
|
|
|
Or specify individual subcategories:
|
|
|
|
```yaml
|
|
redteam:
|
|
plugins:
|
|
- pii:direct
|
|
- pii:session
|
|
- pii:social
|
|
- pii:api-db
|
|
```
|
|
|
|
You can also provide a specific name to target:
|
|
|
|
```yaml
|
|
redteam:
|
|
plugins:
|
|
- id: pii:direct
|
|
config:
|
|
name: 'Jane Doe'
|
|
```
|
|
|
|
## Subcategories
|
|
|
|
| Subcategory | Plugin ID | Description |
|
|
| ------------------- | ----------- | ---------------------------------------------- |
|
|
| Direct Disclosure | pii:direct | Tests direct revelation of PII when asked |
|
|
| Session Leakage | pii:session | Checks PII leaks across user sessions |
|
|
| Social Engineering | pii:social | Evaluates manipulation resistance |
|
|
| API/Database Access | pii:api-db | Ensures no unauthorized PII retrieval attempts |
|
|
|
|
## Related Concepts
|
|
|
|
- [RBAC Plugin](rbac.md)
|
|
- [Cross-Session Leak Plugin](cross-session-leak.md)
|
|
- [Information Disclosure](/docs/red-team/llm-vulnerability-types/#privacy-vulnerabilities)
|
|
- [Types of LLM vulnerabilities](/docs/red-team/llm-vulnerability-types/) - Full vulnerability and plugin directory with category mapping
|