Skip to content

Personal exposure check and weekly scam brief

It checks what is publicly findable about you, such as data broker listings and breaches, and gives a weekly brief of scams aimed at people like you. Findings stay on your machine.

PersonalWorks with Claude Code · Claude Desktop with MCP+1Community example

What it does

  • Searches public sources for your own name and accounts
  • Reviews breach lists and app access granted from your inbox
  • Builds a data broker removal checklist
  • Writes a weekly brief of current scams weighted to your risk profile
  • Keeps sensitive identifiers masked in a local ledger

Your approval boundaries

Approval required

These actions always wait for your yes:

  • Sending any removal request to a data broker
  • Revoking app access to your accounts
  • Checking anyone other than yourself

You decide what happens next.

More about this workflow

This setup is for busy people who want their own day to run a little smoother. It takes a repeat chore off your plate and hands back something you can check quickly.

First, it searches public sources for your own name and accounts. Next, it reviews breach lists and app access granted from your inbox. Then it builds a data broker removal checklist. After that, it writes a weekly brief of current scams weighted to your risk profile. Finally, it keeps sensitive identifiers masked in a local ledger. It works with your web search, web fetch, email and notes app, each on its own login with limited access.

You get the prep work done and waiting for you. The agent stops and asks for your yes before sending any removal request to a data broker, revoking app access to your accounts and checking anyone other than yourself, and says plainly if a step cannot be undone.

“findings kept local and never auto-published”
ToddGBenson ToddGBenson on GitHub · Aug 8, 2026
Before you startWeb search · Web fetch accessScoped permissionsClaude Code or Claude Desktop with MCP
Explore required tools and model recommendations

Tools and access

  • Web search

    Handles the web search part of this job. Grant public search results only.

    API required: Optional. Built into most agent harnesses. A standalone search API needs its own key.

    No sign-up needed
  • Web fetch

    Handles the web fetch part of this job. Grant public pages, no logged-in sessions.

    API required: No. Built into most agent harnesses. It reads public pages with no login.

    No sign-up needed
  • Gmail

    Handles the email part of this job. Grant read-only plus compose (drafts) scopes.

    API required: Yes. Needs a Google Cloud project with an OAuth app and the Gmail API turned on. The agent signs in through OAuth with only the scopes you pick.

  • Notion

    Handles the notes app part of this job. Grant only the pages it needs, read first.

    API required: Yes. Needs a Notion integration. You choose which pages it can see by sharing them with it.

Official links only. Not sponsored, no affiliate links.

Model recommendations

Best pick

Claude Sonnet 5.5

Fast and careful with your inbox and calendar.

$2 per million input tokens, $10 per million output tokens.

Anthropic docs as of October 11, 2026

Cheaper backup

Claude Haiku 5.5

Cheapest Claude option for daily sorting.

From $0.10 per million input tokens and from $0.50 per million output tokens.

Anthropic docs as of October 11, 2026

Our own picks. Not sponsored, no affiliate links.

Build your prompt

Add your details, then copy the prompt into your tool.

1Your details

Fill these in and the prompt updates as you type.

finance, health, family or eldercare

monday

2Your prompt

4 of 4 still empty
Fill these in before you run it: [YOUR NAMES AND PAST ADDRESSES] [RISK PROFILE: finance, health, family or eldercare] [LOCALE] [BRIEF DAY: monday] You are the Personal exposure check and weekly scam brief agent. It checks what is publicly findable about you, such as data broker listings and breaches, and gives a weekly brief of scams aimed at people like you. Findings stay on your machine. Use only the details filled in above. If any [BRACKETED] item is still blank or unclear, stop and ask for it first. Do not guess. What you do on your own: - Searches public sources for your own name and accounts - Reviews breach lists and app access granted from your inbox - Builds a data broker removal checklist - Writes a weekly brief of current scams weighted to your risk profile - Keeps sensitive identifiers masked in a local ledger What you must never do without a yes from a person: - Sending any removal request to a data broker - Revoking app access to your accounts - Checking anyone other than yourself Rules: - Before any step on the list above, stop and ask. Say in plain words what you want to do, who it affects, and whether it can be undone. - If something cannot be undone, say so first, in one short line. - Write drafts, not final actions. A person sends, pays, posts, or deletes. - Keep a short log of every action you took and every source you read. - If you are unsure, ask instead of guessing.
View run instructionsPaste into: Claude Code, Claude Desktop with MCP, ChatGPT agent

Your answers stay in this browser only.

Run your workflow

Connect your tools with only the access this setup needs, then follow these steps.

Steps

Do these in order. Test on old data before it touches live work.

  1. 1Set up Web search. Keep it to public search results only.
  2. 2Set up Web fetch. Keep it to public pages, no logged-in sessions.
  3. 3Connect Gmail with its own login, not yours. Grant read-only plus compose (drafts) scopes.
  4. 4Connect Notion with its own login, not yours. Grant only the pages it needs, read first.
  5. 5Paste the prompt where your harness takes instructions. See the note under the Copy button.
  6. 6Do a dry run on old or test data first. Check every draft and every stop point by hand before you let it near live work.
  7. 7Read its log after the first real run. Only widen access once a week of runs looks clean.

Safeguards and trust score

The score describes this example setup’s access, approval boundaries, ability to undo changes, and scope.

Access18 / 30

Can draft things that send or spend, so it sits close to risky actions.

Human approval30 / 30

Waits for a yes on: sending any removal request to a data broker, revoking app access to your accounts, checking anyone other than yourself.

Undo and logs14 / 20

Proposes changes to live records, so the setup needs a change log and a way back.

Scope16 / 20

Runs on its own login across 4 tools. Fewer connections means a smaller blast radius.

How to raise it

  • Access: Take away its ability to send, post or spend. Let it only write drafts, and have a person press send or pay from their own account +6
  • Undo and logs: Stop it from editing live records. Have it write the change as a proposal you apply, and keep a log of every change with a way to roll it back +3
  • Scope: Cut it down from 4 connected tools to the 2 it needs most, each with its own limited login instead of your full account +2

Do all of these to reach 89, up from 78.

Want help getting there? Get an AI Trust Audit from Pixeldesigns

Reviewed by Trustcase (example setup). How scoring works

Embed badge

Show this trust score on your site or README. It links back here.

Trustcase trust score badge
Markdown
[![Trustcase trust score for Personal exposure check and weekly scam brief](https://trustcase.dev/badge/personal-exposure-check-and-weekly-scam-brief.svg)](https://trustcase.dev/use-cases/personal-exposure-check-and-weekly-scam-brief)
HTML
<a href="https://trustcase.dev/use-cases/personal-exposure-check-and-weekly-scam-brief"><img src="https://trustcase.dev/badge/personal-exposure-check-and-weekly-scam-brief.svg" alt="Trustcase trust score for Personal exposure check and weekly scam brief" height="20"></a>

Other workflows that use the same tools

  • Morning content scan with scripts drafted

    Marketing. Before you wake up, a scheduled task reads your sources and newsletters, sorts stories into post today, save for a series, log, ask me or skip, and drafts a script for anything worth posting. One chat message lists only the decisions.

  • Podcast guest pitches with a nudge log

    Marketing. It finds podcasts your audience listens to, scores each show, and drafts a pitch in your own words. You send every pitch yourself, and a call log tells you who is due a follow up.

  • Lead research brief

    Sales. Turns a new inbound lead into a one page brief before your first call.