domain-intel

Collect passive domain intelligence data from public sources via CLI.

31|3|Updated May 7, 2026
One-click install
npx skills add https://github.com/markwang2658/hermes-windows-native --skill domain-intel-markwang2658
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/markwang2658/hermes-windows-native/tree/main/hermes-agent/optional-skills/research/domain-intel
Command: npx skills add https://github.com/markwang2658/hermes-windows-native --skill domain-intel-markwang2658

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive OSINT for domain intelligence using only Python stdlib to gather subdomains, SSL data, WHOIS, DNS, and domain availability.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs
  • SSL certificate inspection (expiry, issuer, SANs)
  • WHOIS and DNS lookups (registration dates, name servers, and records)
  • Bulk domain analysis across multiple domains with parallel checks

Quick Start

Run the domain_intel.py CLI to perform a quick domain intelligence check.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I gather passive domain intelligence data using Python?

Passive domain intelligence data is collected from public sources via a CLI script, querying records like subdomains, SSL, WHOIS, and DNS to output structured JSON.

Can I find subdomains using Certificate Transparency logs without external dependencies?

Subdomain discovery via Certificate Transparency logs is performed using only Python's standard library, requiring no external dependencies to enumerate domain endpoints.

How do I check SSL certificate details like expiry dates and issuer information?

SSL certificate inspection extracts expiry dates, issuer details, and Subject Alternative Names by connecting to the target domain and parsing the returned certificate.

Does this domain intelligence tool work across Linux, macOS, and Windows environments?

Domain intelligence gathering works across Linux, macOS, and Windows environments because the tool relies solely on the Python standard library for compatibility.

What is the best way to run bulk domain analysis for multiple domains?

Bulk domain analysis across multiple domains is executed using parallel checks via the bulk subcommand, consolidating DNS, WHOIS, and SSL results into structured JSON.

How do I check domain availability and DNS records from the command line?

Domain availability and DNS records are checked from the command line using the available and dns subcommands, returning registration status and record configurations.