email-osint

Aggregate OSINT signals from an email into structured three-layer reports.

1|1|Updated Apr 25, 2026
One-click install
npx skills add https://github.com/chenchunrun/onyx-soc --skill email-osint
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: email-osint
Source: https://github.com/chenchunrun/onyx-soc/tree/main/skills/email-osint
Command: npx skills add https://github.com/chenchunrun/onyx-soc --skill email-osint

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires holehe, httpx, trio, bs4, colorama, termcolor, tqdm, aiohttp, requests, rich, Pillow, reportlab, python-dotenv, markdown-it-py, and includes scripts (resource) components.

What problem does it solve?

This skill helps investigators surface cross-platform accounts and digital footprints linked to a single email address, transforming scattered signals into a coherent, actionable view.

Core Features & Use Cases

  • Phase-based OSINT workflow: mailbox provider analysis, platform registration checks, username extraction and variant generation, multi-platform user lookup, and deep information gathering.
  • Report generation: three-layer output (confirmed facts, reasoned inferences, and leads for further verification).
  • Built-in tools integration: leverages built-in tools holehe and Blackbird, with environment validation and automated data exports.

Quick Start

Input a target email to immediately start OSINT collection and generate a multi-section report.

Frequently Asked Questions about email-osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find linked accounts and digital footprints from a single email address?

Email OSINT investigations surface cross-platform accounts by checking platform registrations and extracting usernames. This skill orchestrates data collection to map identities across services and generate structured three-layer reports.

What is the best way to check if an email is registered on multiple platforms?

Checking email registration across platforms requires tools like holehe and blackbird. This skill orchestrates these tools to verify accounts, handle rate limits, and produce structured three-layer reports of confirmed facts and leads.

Do I need Python to run email OSINT investigations?

Yes, you need Python 3.8 or higher to run email OSINT investigations. The skill orchestrates environment checks, data collection, and reporting using Python dependencies like trio, aiohttp, and requests.

How does an OSINT report structure confirmed facts and verification leads?

OSINT reports structure investigation results into three layers: confirmed facts, reasoned inferences, and leads for further verification. This skill automatically generates this multi-section report after completing platform registration checks and data collection.

Does email investigation handle rate limits and errors during data collection?

Yes, email investigation handles rate limits and errors during platform registration checks and data collection. The skill manages these constraints while orchestrating environment checks, verification, and report generation.