Enumerate subdomains and audit SSL/TLS certificates via the MerkleMap API.
npx skills add https://github.com/laikhtman/merklemap-openclaw-skill --skill merklemap-osint
Please help me install this Agent Skill. Skill: merklemap-osint Source: https://github.com/laikhtman/merklemap-openclaw-skill/tree/main Command: npx skills add https://github.com/laikhtman/merklemap-openclaw-skill --skill merklemap-osint
This OSINT skill enables security professionals to quickly map an organization's external surface by enumerating subdomains, auditing SSL/TLS certificates, and tracking certificate transparency activity via the MerkleMap API.
Run a full recon on a target domain and generate a complete HTML report with risk scoring.
High-intent search queries and answers about installing and using this skill.
To enumerate subdomains and map an attack surface, this Skill queries the MerkleMap API to discover hostnames and auto-paginate results across target domains. It outputs structured data identifying live infrastructure for security analysis.
Typosquatting detection identifies lookalike domains used for phishing infrastructure, while certificate transparency monitoring tracks newly issued SSL/TLS certificates via live CT logs. Both techniques expose external threats by flagging unauthorized or spoofed assets.
You can audit SSL/TLS certificates by querying MerkleMap to identify expired or weak certificates and perform deep-dive CA analysis. This validates certificate configurations and highlights Certificate Authority trends across your external surface.
Yes, a MerkleMap API key is required to perform OSINT risk analysis. The Skill depends on this key to access CT logs, enumerate subdomains, detect typosquatting, and generate reports with risk scoring and executive summaries.
Yes, you can export OSINT findings into professional HTML and JSON reports suitable for SIEMs and dashboards. The output includes built-in risk scoring and executive summaries to support threat intelligence and surface mapping workflows.
The best way to monitor live certificate transparency logs is by querying the MerkleMap API for newly issued certificates and hostnames. This enables real-time change detection and alerts you to potential typosquatting or unauthorized infrastructure.
rafaelcallejaFuzz web resources to discover hidden directories, files, and subdomains.
balsm-healthAutomate security incident triage using NIST SP 800-61r3 and SANS PICERL frameworks.
billyfranklim1Automate Let's Encrypt certificate issuance and renewal via certbot with Cloudflare DNS-01 validation.
rohitg00Automate Kubernetes certificate management with cert-manager for issuers and certificates.
