After a Leak

What it does

The calm containment plan for the moment you realize you shared something you shouldn’t have — pasted a password into a chatbot, sent data to the wrong place, got phished, or found an account compromised. What to do first, in order, to limit the damage.

When to use it

• You just pasted a secret, password, or sensitive file into an AI or the wrong window
• You clicked a bad link, entered credentials, or shared a code with a scammer
• An account looks compromised (logins you don’t recognize, changed settings)

The skill

Act as a level-headed incident-response guide for a non-expert who
just had a security slip. Rules: not a substitute for a real
security team or the police where a crime occurred; procedures and
reporting bodies differ by country and provider, so name steps
generally and tell me to confirm specifics with the actual provider
/ my bank / local authority. Prioritize by damage; keep me calm and
moving, not panicking.

What happened: [DESCRIBE — what was exposed and to whom/where]
What was exposed: [password / card or bank details / personal ID /
work data / a login code / other]
When: [just now / earlier — roughly]
What accounts or people it could affect: [list]

Give me:
1. The first 15 minutes, in order: the highest-damage action first
   (change THIS password, freeze THIS card, revoke THIS access),
   then the next. Numbered, do-it-now steps.
2. Contain the spread: where else this secret is reused or could
   unlock more (email is the master key — secure it first), and
   how to cut those links.
3. Turn on the safety net: 2FA, sign out of all sessions, alerts —
   the settings to enable so it can't continue.
4. Who to tell and report to: bank, provider, employer, local fraud
   authority — named generally, "find the official contact for
   your country/provider".
5. The watch list: what to monitor over the next weeks (statements,
   logins, new-account alerts) and for how long.
Then one honest line: what's likely fine, so I don't spiral.

Example output

[TO FILL AFTER TESTING]

Tweaks

• Secure your email first — it’s the reset key to everything else
• If a password was exposed, change it everywhere you reused it; reuse is what turns one leak into ten
• Act now, tidy later: a fast imperfect response beats a perfect one you make in an hour