A defensive security skill that checks emails and usernames against the 3.2 billion leaked credentials in the COMB dataset.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install comb
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install comb using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is COMB Credential Exposure Checker?
The COMB (Compilation of Many Breaches) skill allows security administrators and developers to programmatically query the ProxyNova API to detect credential exposure. By scanning historical data containing over 3.2 billion breached records, this skill helps organizations identify compromised user accounts and enforce proactive password rotation policies.
Utilizing Openclaw Skills, developers can automate password audits and exposure monitoring workflows without requiring complex API integrations or API keys, streamlining security compliance and threat intelligence tasks.
COMB Credential Exposure Checker Use Cases
- Credential Exposure Auditing: Automating checks on corporate email domains to determine if employees' credentials have been exposed in historical public breaches.
- Proactive Threat Intelligence: Assessing username and password security by verifying if a given credential exists within the COMB dataset.
- Incident Response: Assisting security teams in evaluating the risk level of specific accounts during post-incident investigations.
How COMB Credential Exposure Checker Works
- The AI agent receives a query parameter containing an email, username, or password to check.
- The skill constructs an HTTPS GET request to the ProxyNova COMB API endpoint with the query term.
- The ProxyNova API processes the request, searching its index of the 3.2 billion compiled breach records.
- The API returns a JSON response containing the total match count and up to 100 historical credential combinations.
- The agent parses the response to alert the user of potential compromise and recommend remediation steps.
COMB Credential Exposure Checker Setup
Ensure you have curl installed on your system. To query the API directly via command line, run:
curl 'https://api.proxynova.com/comb?query=example_user'
No API key or external authentication is required to utilize this skill within Openclaw Skills.
COMB Credential Exposure Checker Data Schema & Taxonomy
The skill processes inputs and generates structured JSON responses mapping to the schema returned by the ProxyNova API:
| Field | Type | Description |
|---|---|---|
count |
Integer | Total number of exposed credential records found |
lines |
Array of Strings | List of compromised combinations formatted as email:password or username:password |
Example Sanitized Output:
{
"count": 2,
"lines": [
"[email protected]:password123",
"[email protected]:securepass!"
]
}
COMB Credential Exposure Checker Advanced Features
- No-Key Authentication: Direct access to the dataset without managing API keys or complex setups.
- Automated Alerts: Easily scriptable within agent workflows to trigger alerts when matching exposure records are found.
- Strict Rate Limit Handling: Built-in awareness of the 100 requests per minute API threshold to optimize scanning cadences.
SKILL.md
Loading
Related Openclaw Skills
FWQuant Skills
An advanced quantitative analysis and strategy simulation engine designed to deliver real-time trading signals and historical backtesting insights directly to AI agents.
Token Cockpit
An essential utility among Openclaw Skills that analyzes local usage logs to monitor, project, and optimize your LLM API token spend without sharing your data.
Skill Doctor
Skill Doctor is an offline developer tool to audit, debug, resolve conflicts, and secure your installed Openclaw Skills without external API keys.
Talos Lite
A free, automated content preview tool that generates a 1-week, 3-post social media schedule customized for a single platform based on your brand topic.
F1 Session Summary
A smart AI-driven automation skill to quickly retrieve, summarize, and translate Formula 1 practice, qualifying, and race results.
Scrape Creator Profile
An automated profile scraping and normalization tool for extracting structured public data from major social media platforms.
Featured*
