01
It starts by itself
monthly breach check. Runs in Claude Code routine or cron.
- ↻ monthly breach check
0 9 1 * *
useosint · 58K installsWhat Leaked About You skill
Runs by itself, monthly breach check.
Know when your accounts leak.
Install the What Leaked About You skill and make it a habit: follow https://gethabit.dev/skills/useosint/what-leaked-about-you.md
- 1Copy
- 2Paste into Claude Code, Codex or Cursor
- 3It runs by itself
58K installs52 starsMIT licenceSource on GitHub ↗
What Leaked About You
by useosint · 58K installs
The skill
The what leaked about you skill helps your agent check and interpret data-breach exposure for an email, username or phone with Have I Been Pwned, the Pwned Passwords range API and commercial breach search, without ever using leaked credentials.
Only when you ask.
The habit
Know when your accounts leak.
↻ Runs by itselfmonthly breach check
How the habit works.
You don't have to.
When does it start? How does it check its work? What does it remember?
One run, step by step.
Then it stops.
Stops after your own listed addresses each month, with one retry per lookup.
- 01
Check emails
Look up your own addresses in Have I Been Pwned and note each breach and its data classes.
- 02
Grade breaches
Grade each as confirmed, probable, unconfirmed or rejected, and flag combolists and scrapes.
- 03
Map services
List the services and usernames found; send forgotten handles to hunt-a-handle.
- 04
Check passwords
Hash your current passwords locally and query the range API with the five-character prefix only.
- 05
Compare and report
Show what is new since last month and which passwords and accounts to change.
What it may do.
Nothing more.
It writes only in its own folder and asks you before anything goes out.
- Writes only inloops/breach-self-audit-loop/**
- Talks tohaveibeenpwned.com
- Sendsnothing
- Your OKNothing goes out, so it needs no OK.
Is it for you?
Use it when it fits.
Read both lists. If the left one sounds like you, the What Leaked About You skill helps.
Use it when
- ✓ You audit your own leaked data
- ✓ You triage a possible account takeover
- ✓ You want the services an account used
Skip it when
- – You want to log in with a leaked password
- – You have no lawful basis to process someone's breach data
What Leaked About You skill, answered.
Does my password leave my computer?
No. Only the first five characters of its hash are sent, and the match happens locally.
Can it test a leaked password on a site?
Never. The skill treats that as unauthorized access, with no exceptions.
Can I run it on other people?
This loop is for your own data. Breach records are regulated personal data, so others need a lawful basis.
How do I install the What Leaked About You skill?
Copy the prompt at the top into your agent. It installs the skill from useosint/skills and sets up the habit. Or run npx skills add useosint/skills --skill what-leaked-about-you.
Is the What Leaked About You skill free?
Yes. It is published under MIT. Habit is free too.
What Leaked About You. Now as a habit.
Install the What Leaked About You skill and make it a habit: follow https://gethabit.dev/skills/useosint/what-leaked-about-you.md
All useosint skills →More ops skills →
Works in
- Claude Code
- Codex
- Cursor
- ChatGPT
- Claude app
Made by useosint, published under MIT. Habit links to the original and never changes it. Is this your skill?