skarbiec breach check

Invocation#

skarbiec breach check <item-id> [--field <field>]

Purpose#

Check a stored text field against Have I Been Pwned using the k-anonymous range API.

Required inputs and options#

• Requires an item id. --field defaults to password.

Output and state effects#

• Hashes locally, sends only the SHA-1 prefix, compares suffixes locally, appends audit, and prints checked, pwned, and seen_count without the value. The operator API answers the same at POST /v1/operator/items/breach-check with {"id": ..., "field": ...}, which Desktop's Check against known breaches calls.

Refusals#

• Refuses a missing/non-text field; an unreachable range API returns checked false with reason range_api_unreachable and a detail carrying curl's exit and its own sentence, rather than a false clean result. The request waits for the API's answer.