osint-investigation

Resolve cross-source public records into verifiable evidence chains with JSON and CSV outputs.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/matlee0409/cronus --skill osint-investigation-matlee0409
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: osint-investigation
Source: https://github.com/matlee0409/cronus/tree/main/optional-skills/research/osint-investigation
Command: npx skills add https://github.com/matlee0409/cronus --skill osint-investigation-matlee0409

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Investigators often struggle to assemble and verify public-records from diverse sources, creating incomplete or inconsistent evidence trails. This framework provides a structured approach to fetch, normalize, and cross-reference data across SEC EDGAR, USAspending, Senate LD, OFAC SDN, ICIJ Offshore, NYC ACRIS, OpenCorporates, CourtListener, Wayback, Wikipedia, and Wikidata, enabling reproducible investigations.

Core Features & Use Cases

  • Stdlib-only data collection and normalization across multiple OSINT sources.
  • Cross-source entity resolution and evidence-chain construction for journalism, due diligence, and research.
  • Optional timing analysis for correlated events (e.g., donations vs. awards) and comprehensive findings JSON generation.

Quick Start

Run the included fetch scripts to collect data and then run the findings workflow to generate findings.json.

Frequently Asked Questions about osint-investigation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I cross-reference public records from SEC EDGAR and OpenCorporates for entity resolution?

Cross-source public records resolution is achieved by fetching and normalizing data from multiple OSINT sources like SEC EDGAR and OpenCorporates to build verifiable evidence chains for identity matching. The framework standardizes disparate data formats into a unified structure for reproducible due diligence.

What is the best way to normalize OSINT data from sources like ICIJ Offshore and OFAC SDN?

The best way to normalize OSINT data from ICIJ Offshore and OFAC SDN is using a stdlib-only framework that fetches, structures, and cross-links records into JSON or CSV outputs with robust error handling. This ensures data consistency when resolving entities across disparate international sanctions and offshore leak datasets.

Can I build a verifiable evidence chain for investigative journalism using public records?

Yes, you can build a verifiable evidence chain for investigative journalism by fetching data from sources like CourtListener and NYC ACRIS, then cross-referencing identities to generate reproducible findings. Optional timing analysis hooks allow you to correlate events such as political donations and federal awards.

Do I need external Python libraries to fetch and cross-reference USAspending and Senate lobbying data?

No, you do not need external Python libraries to fetch and cross-reference USAspending and Senate lobbying data; the framework implements stdlib-only data collection and normalization without requiring external dependencies. This reduces setup friction and ensures scripts run in standard Python environments.

How does cross-source entity resolution handle timing analysis for due diligence research?

Cross-source entity resolution handles timing analysis by applying optional hooks to correlate temporal events across public records, such as matching lobbying disclosures with federal contract awards, generating comprehensive findings JSON outputs. This temporal cross-linking strengthens due diligence evidence trails.

What are the limitations of using stdlib-only scripts for OSINT investigations across Wayback and Wikidata?

The limitation of using stdlib-only scripts for OSINT investigations across Wayback and Wikidata is that without external libraries, complex parsing or rate-limiting requires manual implementation, potentially affecting large-scale data extraction throughput. However, this approach guarantees zero-dependency portability and robust error handling.