Breached Email Check

Check if an email has appeared in known data breaches and get detailed breach history, severity, compromised data, and remediation recommendations.

This skill looks like what it says (an external breach-check API), but the SKILL.md expects an API key while the registry metadata declares no required credential — that's an incoherence you should resolve before installing. Before using: 1) Ask the publisher to declare the required API key/env var in the skill metadata (and confirm where the key is stored and how it's protected). 2) Verify the external API domain (toolweb.in) and the publisher's identity/terms/privacy policy; confirm TLS and data-retention practices. 3) Consider privacy: the skill will send email addresses (and possibly other context) to a third party — avoid sending sensitive or production emails until you're confident in the provider. 4) If you allow autonomous invocation, be aware the agent could send user emails automatically; restrict scope or require explicit user approval for every check. 5) Test with non-sensitive example emails and confirm expected behavior and error handling before enabling in production.

Type: OpenClaw Skill Name: toolweb-breached-email-check Version: 1.0.0 The skill bundle defines a legitimate tool for checking email breach history via the ToolWeb.in API. The documentation in SKILL.md clearly outlines the tool's purpose, expected input/output, and the external endpoint (portal.toolweb.in). No malicious code, unauthorized data access, or prompt injection attempts were found.