domain-intel

Identifies subdomains from certificate logs and inspects TLS certificate details using Python stdlib without external API keys.

1|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/brittaniebuffiecsu/zerogravityclaw --skill domain-intel-brittaniebuffiecsu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/brittaniebuffiecsu/zerogravityclaw/tree/main/src/hermes-core/optional-skills/research/domain-intel
Command: npx skills add https://github.com/brittaniebuffiecsu/zerogravityclaw --skill domain-intel-brittaniebuffiecsu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides passive domain reconnaissance to identify subdomains, inspect SSL certificates, and gather domain intelligence without relying on API keys.

Core Features & Use Cases

  • Subdomain Discovery: Automatically find subdomains for a given domain.
  • SSL Certificate Inspection: Examine TLS certificate details, including expiry dates and cipher suites.
  • Domain Availability Check: Passive check if a domain is registered using DNS, WHOIS, and SSL signals.
  • Use Case: Utilize this Skill to gather intelligence on potential targets for security or marketing purposes.

Quick Start

To find subdomains for 'example.com', use the domain-intel skill with the 'subdomains' command: domain-intel subdomains example.com

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find subdomains using certificate logs without API keys?

You can find subdomains by querying certificate logs directly. This skill uses Python stdlib to identify subdomains from certificate transparency logs, requiring no external API keys for passive reconnaissance.

How do I inspect SSL certificate details like expiry dates and cipher suites?

You inspect SSL certificates by examining TLS details directly. This skill retrieves certificate information including expiry dates and cipher suites using standard Python libraries without external dependencies.

Can I perform bulk domain analysis and availability checks using DNS and WHOIS?

Yes, you can perform bulk domain analysis. This skill checks domain registration status using passive DNS, WHOIS, and SSL signals, supporting multi-domain analysis for infrastructure auditing.

What is the best way to gather domain intelligence for infrastructure auditing?

The best way to gather domain intelligence is passive reconnaissance. This skill combines subdomain discovery, TLS inspection, DNS queries, and WHOIS lookups to audit infrastructure without external APIs.

Do I need external API keys to perform domain reconnaissance and DNS record queries?

No, you do not need external API keys. This skill operates entirely with Python stdlib, allowing you to perform DNS record queries and domain reconnaissance without external dependencies.