CLI command
skarbiec breach-check
Check a stored text field against Have I Been Pwned using the k-anonymous range API.
Invocation#
skarbiec breach-check <item-id> [--field <field>]Purpose#
Check a stored text field against Have I Been Pwned using the k-anonymous range API.
Required inputs and options#
- Requires an item id. --field defaults to password.
Output and state effects#
- Hashes locally, sends only the SHA-1 prefix, compares suffixes locally, appends audit, and prints checked, pwned, and seen_count without the value.
Refusals#
- Refuses a missing/non-text field; an unreachable range API returns checked false with reason range_api_unreachable and a detail carrying curl's exit and its own sentence, rather than a false clean result. The request waits for the API's answer.