Assemble OSINT probes, wordlists, and references for external reconnaissance.
npx skills add https://github.com/chatbotkit/rook --skill offensive-osint-chatbotkit
Please help me install this Agent Skill. Skill: offensive-osint Source: https://github.com/chatbotkit/rook/tree/main/skills/offensive-osint Command: npx skills add https://github.com/chatbotkit/rook --skill offensive-osint-chatbotkit
External red-team reconnaissance often requires rapid access to a curated library of probes, wordlists, and patterns. The Offensive OSINT skill provides a modular reference suite that streamlines asset discovery, surface mapping, and secret triage within authorized scopes.
Query the OSINT skill with a target domain to enumerate external surfaces, load references, and run the probes.
High-intent search queries and answers about installing and using this skill.
Subdomain enumeration uses pre-built probes and wordlists to discover external surfaces like DNS records, SSO tenants, and cloud buckets. You query a target domain to map these assets within authorized scopes.
Secret triage applies curated regex pattern catalogs to identify exposed credentials within collected reconnaissance data. These deterministic patterns classify and trace discovered secrets across target surfaces.
Breach correlation maps identity footprints by cross-referencing traceable breach data with target surfaces. It uses reference materials to classify TLS/JA3 fingerprints and identity-fabric footprints for external surface mapping.
Custom wordlists and dork corpora load through the modular references directory for security engagements. The system supports on-demand content loading from references and assets to customize probes for specific target discovery requirements.
No external dependencies are required to maintain reproducible OSINT workflows. The toolkit uses deterministic scripts and modular reference loading to ensure evidence hygiene and consistent results across security engagements.
EntroVyxIndex probes, wordlists, and regex patterns for authorized external reconnaissance.
xalgordDetect and validate subdomain takeover via dangling DNS records and unclaimed cloud resources.
elementalsoulsConsolidate OSINT reconnaissance data for authorized red-team engagements.
uphiagoIndex probes, wordlists, and regexes for authorized external reconnaissance.
