What do I need to use Source Protection Plan?

The source's exposure; How you're communicating; What will be published.

Is Source Protection Plan free to use?

Yes — run it free in the browser playground (no API key needed for the sponsored trial, or bring any provider key), or install it into Claude Code, Cursor, ChatGPT and more via npx pm-claude-skills. MIT-licensed and open source.

Source Protection Plan

Q: How do I know the Source Protection Plan output is good?

The skill verifies itself against its own quality checks: The threat model names the realistic identification channels, including small-N exposure; Communication and document-handling practices reduce metadata and traceability; The publication plan strips document metadata and telltale identifying details; The source is promised only what can actually be delivered; compulsion is addressed honestly.

🔵 Stable🕐 updated 2026-07-24 🔷 SkillSpec L3 pm-journalism

Assess and reduce the risk of exposing a confidential journalistic source. Use when a reporter is working with a confidential source, a whistleblower, or sensitive leaked material and needs to protect the source's identity. Produces a risk assessment (how the source could be identified — metadata, comms, patterns, documents), secure-communication and handling practices, a redaction/anonymization plan for what's published, and the promises to make (and not make) about protection. Guidance is defensive; it is not legal advice.

▶ Run it free — no key needed 📝 Grade your existing draft View SKILL.md ↗

What to give it

▸The source's exposure — their access, how many people share it, and who would want to identify them (employer, state, litigant)

▸How you're communicating — and what material they've shared (documents, files, messages)

▸What will be published — and any deadline/legal context

✅ The bar it holds itself to

Every skill in this library self-verifies — these are this skill's own quality checks, straight from its definition.

✓The threat model names the realistic identification channels, including small-N exposure

✓Communication and document-handling practices reduce metadata and traceability

✓The publication plan strips document metadata and telltale identifying details

✓The source is promised only what can actually be delivered; compulsion is addressed honestly

✓Residual risk is stated plainly, not hand-waved

✓It recommends a media lawyer and states it is not itself legal advice

⚠️ What it refuses to do

Promising absolute anonymity you can't guarantee

Publishing documents with intact metadata or unique phrasing that fingers the source

Ignoring the small-N problem (the detail only a few insiders knew)

Communicating over channels the adversary can subpoena or monitor

Keeping records that become a liability if compelled

Install

npx pm-claude-skills add --agent claude   # or codex · cursor · gemini · hermes
# or one-line MCP (every skill, any client):
claude mcp add pm-skills -- npx -y pm-claude-skills-mcp

Related skills

🔌 Embed this skill

Drop this on your blog, docs, or site — it renders a "Run this skill" card:

<div data-pm-skill="source-protection-plan"></div>
<script src="https://mohitagw15856.github.io/pm-claude-skills/embed.js" async></script>

💬 Discussion

Source Protection Plan is one of 832 open-source professional AI agent skills — all SkillSpec L3. Try them all in the browser · ⭐ Star on GitHub · Browse the full catalog