osint

Map public information about a person or organization into a linked intelligence profile.

Updated Jun 23, 2024
One-click install
npx skills add https://github.com/n4igme/randscript --skill osint-n4igme
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: osint
Source: https://github.com/n4igme/randscript/tree/main/llm/skills/osint
Command: npx skills add https://github.com/n4igme/randscript --skill osint-n4igme

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires hermes-tools, pyyaml, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Security teams need a scalable way to assemble and correlate publicly available information about a person or organization to identify risks, exposure, and relationships.

Core Features & Use Cases

  • Seed-based discovery and progressive correlation across handles, emails, domains, and social profiles.
  • Phase-driven workflow with gates and state tracking to produce a structured OSINT report.
  • Cross-platform linking and chain visualization to understand identity relationships and exposure.

Quick Start

Initialize an OSINT engagement by providing a target and seeds, then run the start workflow to begin phase 1.

Frequently Asked Questions about osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map public information about a person to build an intelligence profile?

OSINT reconnaissance maps public information about a target by starting with structured seed input like handles, emails, and domains. It progressively correlates these seeds across social presence and breach data to build a linked identity chain and intelligence profile.

What is the best way to correlate breach data and domains during threat hunting?

Correlating breach data and domains during threat hunting requires a phased workflow with state tracking. You input known seeds, run the start workflow, and pass phase gates to map relationships and exposure across public sources into a structured report.

Can I use this for due-diligence scenarios on organizations?

Yes, this reconnaissance workflow supports due-diligence scenarios on organizations. It maps public information by handling domains and social presence to produce a structured intelligence report detailing exposure and identity relationships.

Do I need structured seed input to start the reconnaissance workflow?

Yes, structured seed input is required to initialize an engagement. You provide a target and seeds, then run the start workflow to begin phase 1, utilizing bot-friendly data sources and local script tools to track state through YAML files.

How does the phase-driven workflow with gates function?

The phase-driven workflow enforces phase gates between reconnaissance stages to ensure structured progression. It tracks the current state through YAML state files, maintaining correlation chains and exposure context to produce a final intelligence report.