openosint-ai-osint-framework

Automate OSINT investigations across identity, infrastructure, and exposure surfaces.

11|1|Updated May 16, 2026

Search Tags:#data breach #subdomain enumeration #mcp server #osint #shodan #social discovery #google dorks

Ready to run

npx skills add https://github.com/Aradotso/security-skills --skill openosint-ai-osint-framework

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: openosint-ai-osint-framework
Source: https://github.com/Aradotso/security-skills/tree/main/skills/openosint-ai-osint-framework
Command: npx skills add https://github.com/Aradotso/security-skills --skill openosint-ai-osint-framework

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the problem of time-consuming, fragmented OSINT research by coordinating multiple OSINT tasks into a single AI-driven investigation flow.

Core Features & Use Cases

Interactive AI OSINT REPL: Run natural-language investigations that chain multiple OSINT tools and compile structured reports.
Scriptable CLI & JSON outputs: Automate email, username, domain, IP, and phone investigations with predictable timeouts for repeatable workflows.
MCP server integration: Connect the investigation agent to AI clients (e.g., MCP-capable desktops) for seamless, tool-backed research.
Integrated OSINT capabilities (11 tools): Email/account discovery, breach checking, paste search, Google dorks generation, WHOIS/subdomain discovery, IP geolocation/ASN, Shodan exposure queries, and more.

Quick Start

Ask the agent to investigate [email protected] for social accounts and data breaches using the OpenOSINT REPL.

Frequently Asked Questions about openosint-ai-osint-framework

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate OSINT investigations across multiple data points like emails and IPs?▼

You can automate OSINT investigations by chaining 11 integrated tools within a single AI workflow. This coordinates email, username, domain, IP, and phone investigations into structured reports using async subprocess execution.

How do I check for data breaches and social accounts tied to a specific email or username?▼

Checking data breaches and social accounts for an email or username is handled by the AI workflow's integrated breach checking and paste search tools. It queries exposure surfaces and compiles the findings into a structured downstream report.

Can I use this OSINT investigation workflow as an MCP server with my AI client?▼

Yes, you can connect the OSINT investigation agent to MCP-capable AI clients. The MCP server integration mode provides seamless, tool-backed research directly within your desktop environment.

What is the best way to run Shodan exposure queries and subdomain enumeration together?▼

The best way to run Shodan exposure queries and subdomain enumeration together is through the interactive AI REPL. It chains these infrastructure lookups alongside WHOIS and IP geolocation tasks to produce unified research outputs.

Does this OSINT framework support scriptable CLI outputs for automated pipelines?▼

Yes, the OSINT framework supports scriptable CLI execution with JSON outputs. It enforces predictable timeouts to ensure repeatable workflows for automated email, domain, and IP investigations.