스킬 what-leaked-about-you

📦

what-leaked-about-you

Name: what-leaked-about-you
Author: useosint

콘텐츠 리비전 r1 높은 위험 ⚙️ 외부 명령어📁 파일 시스템 접근🔑 환경 변수

Assess Your Data Breach Exposure

Breach results are difficult to verify, interpret, and handle without exposing sensitive data. This skill provides a structured workflow for authorized analysis and reporting.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "what-leaked-about-you" from https://skillstore.io/skills/useosint-what-leaked-about-you.md and its manifest at https://skillstore.io/api/skills/useosint-what-leaked-about-you/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/useosint-what-leaked-about-you.md 서명된 manifest GET /api/skills/useosint-what-leaked-about-you/manifest 서명된 lockfile GET /api/skills/useosint-what-leaked-about-you/lockfile

테스트해 보기

"what-leaked-about-you" 사용 중입니다. HIBP reports a verified forum breach containing email addresses, usernames, IP addresses, and password hashes.

예상 결과:

Confirmed exposure to the named forum. Change any reused password, enable multifactor authentication, review the recovered username, and never attempt login with leaked credentials.

"what-leaked-about-you" 사용 중입니다. A commercial corpus shows one unattributed email and password pair with no source date.

예상 결과:

Unconfirmed exposure. Record the vendor and retrieval date, exclude the credential value, and do not attribute the record to any service.

"what-leaked-about-you" 사용 중입니다. A client asks whether an existing password appears in known breach data.

예상 결과:

Use the Pwned Passwords range method locally. Send only the five-character SHA-1 prefix, compare suffixes locally, and do not log the password.

보안 감사

높은 위험

v1 • 2026. 8. 3. 버전별 보고서 열기

All 25 static findings are false positives caused by Markdown links, inline code, and explanatory security terminology. No executable command, environment access, path traversal, or cryptographic implementation appears in the reviewed files. However, the skill encourages sensitive breach-record retrieval and pre-employment screening, creating substantial privacy and misuse risks.

스캔된 파일

459

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (2)

높음

SKILL.md:65-76 SKILL.md:94-110

Sensitive Breach-Record Retrieval and Identity Profiling

The skill recommends services that return leaked field values, then uses those records to map identities and memberships across services.

The instructions explicitly describe retrieving record-level values and using usernames, phones, IP addresses, names, and passwords as cross-service identity signals.

높음

SKILL.md:8-10 reference/source-catalogue.md:28-31

Employment Screening With Breached Personal Data

The declared scope includes pre-employment screening, although source licenses may prohibit employment decisions and breach records contain sensitive personal data.

The front matter names pre-employment screening, while the source guidance explicitly warns that licenses may prohibit employment use.

위험 요인

⚙️ 외부 명령어 (15)

SKILL.md:35 SKILL.md:50 SKILL.md:99 SKILL.md:107 SKILL.md:170 SKILL.md:174 SKILL.md:175 SKILL.md:193 SKILL.md:194 SKILL.md:195 SKILL.md:196 SKILL.md:197 SKILL.md:198 SKILL.md:199 SKILL.md:200

📁 파일 시스템 접근 (1)

SKILL.md:87

🔑 환경 변수 (1)

SKILL.md:159

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/useosint-what-leaked-about-you/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/useosint-what-leaked-about-you/security.svg)](https://skillstore.io/skills/useosint-what-leaked-about-you?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/useosint-what-leaked-about-you?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/useosint-what-leaked-about-you/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/useosint-what-leaked-about-you.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

useosint. (2026). what-leaked-about-you security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/useosint-what-leaked-about-you/audits/1

BibTeX 인용

@techreport{useosint-useosint-what-leaked-about-you-2026,
  author = {useosint},
  title = {what-leaked-about-you security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/useosint-what-leaked-about-you/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "what-leaked-about-you security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "useosint"
date-released: "2026-08-03"
url: "https://skillstore.io/skills/useosint-what-leaked-about-you/audits/1"
identifiers:
  - type: other
    value: "skillstore:useosint-what-leaked-about-you:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Review Personal Exposure

Plan a self-audit that identifies exposed services, minimizes retained data, and prioritizes password changes without testing leaked credentials.

Triage an Account Compromise

Interpret authorized breach results, assess source confidence, and prepare remediation steps during an incident response investigation.

Protect an Authorized Client

Evaluate a client's exposure under written authority, document provenance, and report only findings relevant to the agreed objective.

이 프롬프트를 사용해 보세요

Plan a Personal Breach Check

Create a privacy-preserving plan to check my own email address for breach exposure. Do not request or reproduce any password.

Interpret a Breach Summary

Interpret this authorized breach summary: [summary]. Separate confirmed facts, uncertain claims, affected data classes, and recommended account actions.

Assess Record Credibility

Assess these authorized records: [record descriptions]. Compare attribution, field structure, dates, provenance, duplication, and independent corroboration without retaining credential values.

Design a Controlled Investigation

Design an authorized breach-exposure investigation for [objective]. Define lawful scope, allowed selectors, source order, confidence rules, retention limits, and reporting boundaries.

모범 사례

Obtain explicit authority and define the investigative objective before querying any identifier.
Start with curated membership-only sources and retrieve record-level fields only when necessary.
Exclude credentials, minimize personal data, encrypt evidence, log access, and delete records on schedule.

피하기

Never authenticate, reset an account, or test password reuse with leaked credentials.
Do not treat combolists, duplicate vendor results, or public scrapes as independently verified breaches.
Do not expand identity pivots beyond the documented scope or use breach data for employment decisions.

자주 묻는 질문

Does this skill search breach databases automatically?

No. It provides source-selection, interpretation, confidence, handling, and reporting guidance.

Can I check another person's email address?

Only with a valid lawful basis and appropriate authority. Self-audits and documented client investigations provide the clearest scope.

Does a missing result prove that no breach occurred?

No. A breach may be unpublished, unindexed, restricted, or absent from the selected source.

Can I test a leaked password on an account?

No. Never authenticate, request a reset, or test reuse with leaked credentials.

How should I check a password I already control?

Use the Pwned Passwords range method locally, avoid logs, and discard the plaintext immediately.

How should uncertain records be reported?

State the source, retrieval date, attribution limits, corroboration status, and confidence grade. Do not present uncertain records as confirmed facts.

개발자 세부 정보

작성자

useosint

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/useosint/osint-skills/tree/06243a5620b0c9c97502edd4ee9e31995a3bdccd/skills/what-leaked-about-you

참조

76c3621ba67d9236f7e0674bbf2a2ecc2696e20c

유지보수 최신성

2026. 8. 3.

사용량

0 다운로드 · 0 조회

파일 구조

📁 reference/

📄 record-fields.md

📄 source-catalogue.md

📄 SKILL.md

useosint의 다른 스킬

전체 보기

📦

find-the-original-image

Trace Images to Their Earliest Known Source

Reverse image results often confuse similarity with provenance and can expose sensitive material. This skill guides multi-engine searches, preprocessing, source validation, and responsible confidence grading.

연구 및 학습 보기

📦

오류와 근본 원인 디버그

작성자 89jobrien

증거가 로그, 스택 트레이스, 서비스 전반에 흩어져 있으면 오류와 인시던트를 분류하기 어렵습니다. 이 스킬은 진단을 구조화하고, 로그를 파싱하며, 패턴을 식별하고, 최소한의 수정으로 안내합니다.

코딩 및 개발 보기

what-leaked-about-you

내 에이전트로 설치

에이전트가 읽기 쉬운 리소스

테스트해 보기

보안 감사

확인된 보안 우려 사항 (2)

위험 요인

보고서 링크 복사

Markdown 배지

HTML 배지

임베드 카드

APA 인용

BibTeX 인용

CITATION.cff

Skillstore 점수

만들 수 있는 것

Review Personal Exposure

Triage an Account Compromise

Protect an Authorized Client

이 프롬프트를 사용해 보세요

모범 사례

피하기

자주 묻는 질문

개발자 세부 정보

useosint의 다른 스킬

find-the-original-image

is-this-photo-real

investigate-without-getting-made

관련 스킬

security-engineering

malware-analyst

incident-runbook-templates

incident-response-incident-response

incident-responder

debugging