domain-intel

Performs domain intelligence gathering using Python standard library and outputs structured JSON.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/AVOI-CEO/avoi-agent --skill domain-intel-avoi-ceo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/AVOI-CEO/avoi-agent/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/AVOI-CEO/avoi-agent --skill domain-intel-avoi-ceo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive OSINT gathering of domain data using only Python standard library, enabling analysts to perform reconnaissance without external APIs or keys.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs and DNS data
  • SSL/TLS certificate inspection, WHOIS lookups, DNS records, and passive domain availability checks
  • Bulk analysis across multiple domains with structured JSON output
  • Works offline with stdlib, no external dependencies

Quick Start

Run python3 SKILL_DIR/scripts/domain_intel.py subdomains example.com

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain intelligence gathering without external APIs?

Passive domain intelligence gathering can be performed using Python standard library to inspect WHOIS records, DNS data, and Certificate Transparency logs without external APIs. It requires no API keys and outputs structured JSON.

Can I discover subdomains using only Python's standard library?

Yes, subdomain discovery is possible using only Python's standard library by querying Certificate Transparency logs and DNS data. The script works offline across Linux, macOS, and Windows with zero external dependencies.

How do I run bulk DNS and SSL analysis across multiple domains?

Bulk multi-domain analysis is executed by running the Python script to collect DNS records, SSL certificates, and WHOIS data. It processes multiple domains simultaneously and emits structured JSON for all outputs.

Does this WHOIS lookup tool require any API keys or third-party libraries?

No, this WHOIS lookup approach requires zero API keys or third-party libraries. It operates entirely offline using Python's built-in standard library to gather domain data and perform passive reconnaissance.

What is the best way to check domain availability and inspect TLS certificates?

The best way to check domain availability and inspect TLS certificates is using a zero-dependency Python script. It performs passive checks and extracts SSL data directly through standard library network functions.

Are there limitations to OSINT domain reconnaissance using only Python stdlib?

Limitations of OSINT domain reconnaissance using Python stdlib include passive data collection only, meaning no active port scanning. It relies entirely on standard library network functions and public transparency logs.