metadata-hygienelisted
Install: claude install-skill fevra-dev/Subrosa
# Metadata Hygiene
Audit and cleaning guidance for embedded metadata in files before external sharing. Covers binary file headers, document properties, version history, geolocation data, device identifiers, and version control artifacts.
**Composable with:**
- `opsec-review` — identifies metadata as a finding; this skill executes the cleaning
- `redact` — handles text content PII; this skill handles embedded file metadata
---
## File Type Coverage
| File type | Primary metadata risks | Reference section |
|---|---|---|
| Images (JPEG, PNG, TIFF, HEIC, WebP) | GPS coordinates, device model, timestamp, author | `references/image-metadata.md` |
| PDF | Author, company, software, creation date, revision history, comments, embedded fonts with license info | `references/document-metadata.md` |
| DOCX / XLSX / PPTX (Office) | Author, last modified by, company, revision history, tracked changes, comments, template path | `references/document-metadata.md` |
| Audio (MP3, FLAC, M4A, WAV) | GPS (phone recordings), device ID, recording software, embedded artwork with its own EXIF | `references/av-metadata.md` |
| Video (MP4, MOV, MKV) | GPS coordinates, device model, recording software, creation timestamp, chapter markers | `references/av-metadata.md` |
| Archives (ZIP, TAR, 7z) | Internal file paths revealing directory structure, creation timestamps, OS identifiers | `references/archive-metadata.md` |
| Git repositories | Real name in commit history, email in commits, internal bran