skills.rest
cxnaive
cxnaiveCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Perform passive domain reconnaissance using Python standard library modules.

Updated Jun 17, 2026
Search Tags:#automation#security#reconnaissance#dns#ssl#osint#whois
One-click install
npx skills add https://github.com/cxnaive/hermes-agent-llbot --skill domain-intel-cxnaive
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/cxnaive/hermes-agent-llbot/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/cxnaive/hermes-agent-llbot --skill domain-intel-cxnaive

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill solves the need for rapid, dependency-free reconnaissance of domain infrastructure, allowing users to gather intelligence on subdomains, SSL certificates, and DNS records without triggering active security alerts or requiring external API keys.

Core Features & Use Cases

  • Passive Reconnaissance: Perform subdomain discovery, WHOIS lookups, and DNS record analysis using only Python standard libraries.
  • Infrastructure Auditing: Quickly inspect SSL certificate validity, expiry dates, and TLS configurations for any target domain.
  • Use Case: Use this skill to verify the security posture of a new vendor domain by checking their SSL certificate status and DNS configuration before proceeding with a partnership.

Quick Start

Use the domain-intel skill to perform a full passive reconnaissance scan on example.com.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without installing external dependencies?▼

Passive domain reconnaissance can be performed using only Python standard library modules to execute WHOIS lookups, subdomain discovery, and DNS record resolution without requiring external dependencies or API keys.

Can I inspect SSL certificate validity and expiry dates across different operating systems?▼

Yes, you can inspect SSL certificate validity, TLS configurations, and expiry dates across Linux, macOS, and Windows environments using firewall-friendly network requests built entirely on Python standard libraries.

What is passive OSINT gathering and how does it avoid triggering security alerts?▼

Passive OSINT gathering collects infrastructure intelligence on subdomains, DNS records, and SSL certificates by querying public records rather than actively scanning targets, thereby avoiding triggering active security alerts.

How do I check the security posture of a vendor domain before establishing a partnership?▼

You can audit a vendor domain's security posture by performing passive reconnaissance to verify SSL certificate status, inspect DNS configurations, and gather WHOIS information without alerting their security systems.

Does domain-intel work without external API keys or third-party Python packages?▼

Yes, domain-intel operates using zero-dependency execution by relying solely on Python standard library modules, ensuring firewall-friendly network requests without needing any external API keys.

What are the limitations of using standard library modules for DNS and WHOIS lookups?▼

Using only Python standard library modules for DNS resolution and WHOIS lookups limits you to passive reconnaissance; it does not perform active port scanning or vulnerability detection.

Related Skills

Explore More Software Engineering Skills→
icyzhicyzh
1

domain-intel

Query certificate transparency logs, WHOIS servers, and DNS records for passive domain reconnaissance.

Community
Intermediate
PlaidmustachePlaidmustache

domain-intel

Collect subdomains, SSL details, WHOIS data, and DNS records as structured JSON.

Community
Intermediate
transilienceaitransilienceai
462

domain-assessment

Coordinate subdomain discovery and port scanning to build a domain attack surface inventory.

Official
Basic
InverterNetworkInverterNetwork

domain-intel

Perform passive domain reconnaissance with subdomain discovery, SSL inspection, WHOIS, and DNS resolution.

Official
Intermediate