Conduct structured cyber threat intelligence and OSINT analysis on target entities.
npx skills add https://github.com/auxi-wardrobe/auxi-all-in --skill cti-expert
Please help me install this Agent Skill. Skill: cti-expert Source: https://github.com/auxi-wardrobe/auxi-all-in/tree/main/.agents/skills/cti-expert Command: npx skills add https://github.com/auxi-wardrobe/auxi-all-in --skill cti-expert
This Skill transforms Claude into a trained cyber threat intelligence and open-source intelligence analyst, enabling structured intelligence collection and analysis of targets without the need for API keys.
Use the /cti-expert /case command followed by the target to initiate a full autonomous case investigation.
High-intent search queries and answers about installing and using this skill.
Cyber threat intelligence collection is achieved by transforming Claude into a trained OSINT analyst, which executes an automated workflow to acquire raw data, enrich findings via pivot expansion, assess results, and deliver structured Markdown and Word reports without requiring API keys.
Yes, cyber threat intelligence analysis requires no API keys for core functionality. The system handles structured collection, reconnaissance, data enrichment, assessment, and report generation entirely through OSINT techniques and commands.
The AEAD workflow for cyber threat intelligence is a structured processing pipeline that Acquires raw data, Enriches findings with pivot expansion, Assesses the intelligence, and Delivers final structured reports in Markdown and Word formats with charts and diagrams.
To begin an autonomous OSINT investigation, use the /cti-expert /case command followed by the target entity. This initiates the full automated cyber threat intelligence workflow, executing multi-vector reconnaissance and structured analysis.
The OSINT analyst tool relies on agentflow-py, fastapi, pydantic, boto3, and pandas as dependencies. These frameworks support the advanced internal design required for structured intelligence collection, data enrichment, and report generation.
Cyber threat intelligence report delivery supports Markdown and Word formats featuring styled formatting, charts, and diagrams. These outputs present the assessed findings from the multi-vector reconnaissance and data enrichment phases.
cxnaivePerform passive domain reconnaissance using Python standard library modules.
slicervmAutomate RustFS installation in a Slicer VM for local S3 access.
stevengonsalvezAutomate network, web, and threat intelligence reconnaissance across 135 modules.
mishahaninQuery sanctions lists, corporate registries, and breach databases to generate structured intelligence briefs.
