Skip to content
Get packs

Data Breach Blast Radius

Estimates the impact of a hypothetical data breach: what data is exposed, who is affected, and regulatory fine ranges.

Source Download skill
Repository
github/awesome-copilot
Stars
40,703
Licence
MIT
Files
7 files

What it does

When installed, the agent scans a codebase (schemas, API contracts, configs, logs, infrastructure files) to find sensitive personal, health, payment and credential data, traces how that data moves through the system, and flags where it could leak. It then produces a pre-breach report estimating how many people could be affected, which regulations would apply, and what penalties and costs might follow, with a prioritized list of hardening steps. The skill states which figures come from law text (such as GDPR Art. 83, CCPA and HIPAA) and which are heuristic planning estimates.

Great for

  • Engineering leads preparing for a security review, pentest, or DPIA
  • Teams handling customer, health, or payment data who want to understand worst-case exposure
  • Compliance or security staff preparing breach readiness material for leadership

Skip it if

  • Legal decisions or formal compliance sign-off: the skill itself says it does not replace legal counsel or a formal DPIA/risk assessment
  • Relying on the cost and record-count figures as precise: these are model-based planning estimates, and the cost benchmarks come from IBM reports that change yearly
  • Analyzing a live breach incident: the skill is designed for proactive analysis, not incident response

Try asking

  • “Assess breach impact for the payments service in this repo and list the data that could be exposed”
  • “Calculate the blast radius if our user database were leaked, including likely regulatory exposure under GDPR and CCPA”
  • “Produce a sensitive data inventory for src/ and flag fields that are logged or returned in API responses”
  • “Create a prioritized hardening roadmap from the data flow findings”
Step-by-step guide: how to use Data Breach Blast RadiusInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the MIT licence and an attribution note.

    data-breach-blast-radius.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip data-breach-blast-radius.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip data-breach-blast-radius.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Give it a specific path (for example /data-breach-blast-radius src/) to keep the scan focused and cheaper to run
  • Check the references/SOURCES.md links yourself before quoting any fine amount or citation in a formal document
  • Ask the report to label every figure as law-sourced or estimate, and have counsel review anything going to regulators or the board

What's inside

  • references/blast-radius-calculator.md
  • references/data-classification.md
  • references/hardening-playbook.md
  • references/regulatory-impact.md
  • references/report-format.md
  • references/SOURCES.md
  • SKILL.md

Redistributed unmodified from github/awesome-copilot under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.