useosint/skills
Developer toolsこのページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る
28 OSINT Agent Skills that turn Cursor, Claude & AI coding agents into a full open-source intelligence platform — reconnaissance, attribution, GEOINT, breach checks & due diligence.
概要
Reconnaissance · Attribution · GEOINT · Breach checks · Due diligence 28 skills that let Cursor, Claude, and other coding agents actually run an open-source-intelligence investigation — pivot from an email to a breach to a reused handle to a real name, geolocate a photo from the pixels, map a company's subsidiaries — and write it up with sources instead of vibes. - — end-to-end workflows for a person, company, domain, username, email, phone, photo, or social account. - — the individual techniques those workflows lean on (reverse image search, WHOIS, certificate transparency, breach lookups, chronolocation, and so on). You point it at a target. It picks the workflow, chains the techniques, and hands back a report where every claim has a source and a confidence level. These aren't cheat sheets.
README
以下は原文 README の抜粋です。原文を見る。
28 skills that let Cursor, Claude, and other coding agents actually run an open-source-intelligence investigation — pivot from an email to a breach to a reused handle to a real name, geolocate a photo from the pixels, map a company’s subsidiaries — and write it up with sources instead of vibes.
Two kinds:
- 10 you run by name — end-to-end workflows for a person, company, domain, username, email, phone, photo, or social account.
- 18 the agent reaches for on its own — the individual techniques those workflows lean on (reverse image search, WHOIS, certificate transparency, breach lookups, chronolocation, and so on).
You point it at a target. It picks the workflow, chains the techniques, and hands back a report where every claim has a source and a confidence level.
These aren’t cheat sheets. Every skill carries the tradecraft that separates a
lead from a finding — where each source lies to you, which results are
artefacts of how the tool works, and what it takes to call something confirmed.
Each one ships with reference/ material too: the query cookbooks, per-country
indicator guides, registry catalogues, and format tables you’d otherwise keep
in a browser tab.
What a run looks like
> recon-a-domain-passively example.com
scope passive only, no scanning
whois NameCheap, created 2019-03-11, registrant behind privacy guard
dns MX → Google Workspace · SPF lists sendgrid + mailgun
crt.sh 14 subdomains, incl. staging.example.com and vpn.example.com
shodan vpn:443 Fortinet · staging exposes :8080 Jenkins (no auth)
wayback 2021 team page named 6 staff, since deleted
pivoted 3 staff → LinkedIn, flagged the open Jenkins, wrote report.md
Illustrative — a real run depends on the target and which tools you have keys for. The skills are the technique and the tooling; some tools (Shodan, HIBP, DeHashed) want their own API key, and free alternatives are called out inline.
Install
git clone https://github.com/useosint/osint-skills.git
cd osint-skills
./install.sh
install.sh symlinks all 28 skills into ~/.cursor/skills, so git pull keeps
them current. Restart your agent afterward.
| Command | Installs to |
推奨ツール
別のキーワードを試すか、フィルタを外してください。
インストール
npx skillfish add useosint/skills