security-osint

Monitors Twitter and Reddit for CVE discussions, breach reports, and threat intelligence via Xpoz.

15|3|Updated Feb 23, 2026
One-click install
npx skills add https://github.com/XPOZpublic/xpoz-agent-skills --skill security-osint-xpozpublic
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-osint
Source: https://github.com/XPOZpublic/xpoz-agent-skills/tree/main/skills/security-osint
Command: npx skills add https://github.com/XPOZpublic/xpoz-agent-skills --skill security-osint-xpozpublic

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires xpoz, @xpoz/xpoz.

What problem does it solve? Security teams often learn about vulnerabilities and breaches too late through formal advisories. This Skill surfaces early-warning threat intelligence by monitoring social platforms where security researchers discuss CVEs, zero-days, and breaches 24-48 hours before official publications. ## Core Features & Use Cases - CVE & Vulnerability Tracking: Search Twitter and Reddit for discussions about specific CVEs, software vulnerabilities, and zero-day chatter with targeted query templates. - Breach & Threat Actor Monitoring: Detect breach reports, ransomware mentions, and threat actor campaign discussions across security-focused communities. - Structured Intelligence Reports: Generate reports with severity assessment, disclosure timelines, key researcher voices, subreddit activity, and recommended actions. - Use Case: Ask "What is the security community saying about CVE-2026-1234?" and receive a timeline of first mentions, PoC availability, patch status, and credible researcher commentary pulled from Twitter and Reddit. ## Quick Start Ask your agent to find discussions about a specific CVE or software vulnerability on Twitter and Reddit from the past week.

Frequently Asked Questions about security-osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor Twitter for CVE discussions?

Use the getTwitterPostsByKeywords tool with a query like "CVE-2026-1234" and a date range covering the last 7 days. The Skill fetches matching posts with engagement metrics, then polls checkOperationStatus until results are ready.

How to find security researchers discussing a vulnerability?

Call getTwitterUsersByKeywords with the vulnerability query to list users posting about it. The relevantTweetsCount and followersCount fields help identify the most active and credible researchers on the topic.

Does this Skill work with Reddit security communities?

Yes, it searches Reddit via getRedditPostsByKeywords, covering subreddits like r/netsec and r/cybersecurity. Results include post titles, scores, comment counts, and subreddit names for technical discussion analysis.

What authentication is required for Xpoz social media data?

You need a free Xpoz access key from xpoz.ai, usable via MCP OAuth flow or as an XPOZ_API_KEY environment variable for the Python or TypeScript SDK. The free tier supports up to 75K results with no credit card.

What are the limitations of social media threat intelligence?

Social signals indicate community discussion, not confirmed exploitation, so findings need verification against official advisories. Coverage is limited to Twitter and Reddit, and the Skill cautions against amplifying exploit code or IoCs.