A few months ago I was hunting for an old boarding pass on our NAS and found a passport scan sitting in a folder shared with relatives, tax returns from three years ago next to it. Nobody had made that mess; every family's NAS ends up like this: ten years of documents mixed together and no idea who can already see what.
That is Privacy Vault Guardian. It scans the folders you name, classifies sensitive documents on-device (identity, money, tax, health, legal), crosses them with a map of your shared folders to find what is actually exposed, and proposes a private vault layout - moving files only after you approve each batch, never deleting anything, leaving an audit report behind.
What I learned: the hard part is not the AI, it is trust. Every design decision turned into a confirmation gate or a never-delete guarantee. Building against the Uliya Skill standard showed me how much of good agent orchestration is discipline - pass only real returned results downstream, stop when something is missing, and do not overclaim what the platform exposes (shared-folder permission granularity was our biggest honesty call).
How we built it: the Skill is pure Markdown orchestration - a SKILL.md workflow delegating to file, document and knowledge agents over UGOS CLI capabilities, no custom code required. An AI assistant helped draft and validate the package against the official kit checker (disclosed per the rules); the concept, scope decisions and final edits are my own.
Built With
- ai-agents
- file-automation
- local-first
- nas
- privacy
- ugos
