haveibeenpwned

Query the Have I Been Pwned v3 API to detect breached emails.

779|139|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/taracodlabs/aiden --skill haveibeenpwned-taracodlabs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: haveibeenpwned
Source: https://github.com/taracodlabs/aiden/tree/main/skills/haveibeenpwned
Command: npx skills add https://github.com/taracodlabs/aiden --skill haveibeenpwned-taracodlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides quick verification of whether an email address has appeared in public data breaches by querying the Have I Been Pwned v3 API, helping users assess security risk and exposure.

Core Features & Use Cases

  • Single-email checks: Determine if a specific email has been breached and view breach details.
  • Paste/check history awareness: Retrieve information about pastes associated with an email for broader exposure context.
  • Security workflows: Use in risk assessments, onboarding security checks, and ongoing breach monitoring.

Quick Start

Provide an email address and run the breach check to see if it appears in any breaches.

Frequently Asked Questions about haveibeenpwned

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if an email was exposed in a data breach?

To check if an email was exposed in a data breach, you query the Have I Been Pwned v3 API with the target email address to identify its presence in public breaches, paste records, and retrieve specific exposure details.

What information do I need to perform an email breach check?

Performing an email breach check requires a valid email address and a HIBP_API_KEY. The HIBP_API_KEY satisfies authentication for querying the Have I Been Pwned v3 API, enabling you to retrieve breach and paste endpoint data successfully.

Can I use this for checking multiple emails in a security audit?

You can use this for checking individual emails or small lists during security hygiene audits and risk assessments. It queries breach and paste endpoints while respecting API rate limits to monitor ongoing exposure across the provided email addresses.

What does a 404 response mean when checking email breach history?

A 404 response when checking email breach history indicates the email is clean and has not appeared in any public data breaches. The system handles these 404 responses explicitly as clean results rather than application errors during the API query.

How does a paste check differ from a data breach check?

A paste check retrieves information about pastes associated with an email from paste-sharing sites, providing broader exposure context. A data breach check queries compromised account records from known website intrusions via the dedicated breach endpoint.