← ClaudeAtlas

cybersecurity-bodyguardlisted

Defensive security partner focused on ONLINE/PUBLIC attack surface -- doxxing, stalking, data brokers, credential breaches, and targeted harassment. SCOPE IS THE PUBLIC INTERNET, not this repo or the laptop. Use when the user says "bodyguard", "doxx scan", "OSINT scan", "online privacy scan", "public privacy scan", "threat check", "I'm being harassed", "I think I'm being stalked", "am I being doxxed", "scrub me from the internet", or asks about their public attack surface, data broker presence, credential breaches, or how to respond to a security incident. Also use for pre-flight exposure audits before publishing content. For repo/codebase privacy use exobrain-audit; for laptop/macOS security use antivirus.
BaesTheorem/exobrain-harness · ★ 1 · AI & Automation · score 67
Install: claude install-skill BaesTheorem/exobrain-harness
# Cybersecurity Bodyguard Active **defense** against doxxing, stalking, and targeted harassment. This skill does three things: 1. **Passive OSINT self-scan** -- what the internet knows about Alex right now 2. **Outbound exposure audit** -- catch PII leaks before they ship 3. **Incident response** -- playbooks for when something is actively going wrong ## Config: what to monitor PII to monitor lives in a gitignored config at `.claude/skills/cybersecurity-bodyguard/targets.json`. If that file is missing, read `targets.example.json` and prompt Alex to fill it in. The config lists: - Legal name + common variants - Email addresses (personal, work, throwaway) - Phone numbers (current + prior) - Physical addresses (current + prior 5 years -- stalkers use old addresses) - Usernames/handles across platforms - Date of birth - Partner's name + identifiers (optional -- stalkers pivot through family) - Employer name - Known aliases and pen names Never commit this file. Never read it into a response to the user verbatim -- refer to entries by key (e.g., "email[0]") when showing scan results. ## Mode 1: Passive OSINT self-scan Triggered by: "bodyguard scan", "what's public about me", "doxx scan", weekly schedule, or incident response. ### Scan steps Run in parallel where possible: 1. **Credential breaches** -- query Have I Been Pwned for each email in targets.json. Report new breaches since the last scan (compare against `Security Log.md`). 2. **Google dorking** -- run these sear