Check emails and passwords against Have I Been Pwned breach data.
npx skills add https://github.com/rawveg/skillsforge-marketplace --skill haveibeenpwned
Please help me install this Agent Skill. Skill: haveibeenpwned Source: https://github.com/rawveg/skillsforge-marketplace/tree/main/haveibeenpwned Command: npx skills add https://github.com/rawveg/skillsforge-marketplace --skill haveibeenpwned
This Skill provides guidance for integrating Have I Been Pwned (HIBP) API usage to check for compromised accounts, breaches, and password exposures.
Check an account breach with a simple request and interpret the results (e.g., "Check if [email protected] has been pwned").
High-intent search queries and answers about installing and using this skill.
Check if an email has been compromised by querying the Have I Been Pwned API, which searches across known breaches and returns matching breach records with exposure details. The API requires authentication and handles rate limiting to prevent abuse.
Use k-anonymity password checks through HIBP, which hashes your password locally, sends only the first 5 characters to the API, and returns matches without ever transmitting the full password, protecting user privacy.
Integrate HIBP by implementing API key authentication, handling rate-limit responses, parsing breach data from endpoints, and filtering results by domain or account to block compromised credentials during login or signup.
Monitor domains by querying HIBP endpoints for breaches and pastes affecting specific domains, then filtering API responses to surface only emails belonging to your organization for breach notification and remediation.
You need an API key for authentication, network access to HIBP endpoints, ability to handle rate-limit headers, and knowledge of password hashing or k-anonymity concepts for secure password validation workflows.
HIBP covers known, indexed breaches only; rate limiting restricts query frequency; k-anonymity password checks work for common breaches but may miss emerging exploits; consider combining with additional security layers for comprehensive protection.
taracodlabsQuery the Have I Been Pwned v3 API to detect breached emails.
marquesfelipDetect and prevent account takeover attacks in SaaS applications.
marquesfelipSecurely store and verify passwords using Argon2id, bcrypt, scrypt, and PBKDF2.
HybridAIOneRetrieve specific credentials from macOS Passwords and Keychain via the security CLI.
