Analyze suspicious URLs for phishing, redirects, and evasion indicators.
npx skills add https://github.com/chenchunrun/onyx-soc --skill url-analysis-chenchunrun
Please help me install this Agent Skill. Skill: url-analysis Source: https://github.com/chenchunrun/onyx-soc/tree/main/skills/url-analysis Command: npx skills add https://github.com/chenchunrun/onyx-soc --skill url-analysis-chenchunrun
This Skill provides dual-mode analysis to assess suspicious URLs, offering fast triage and in-depth capabilities for phishing detection, redirection tracing, homograph detection, evasion checks, threat intelligence enrichment, and threat expansion suggestions.
Analyze a URL by running a quick analysis on a suspicious link to get a fast verdict, with optional deep analysis prompts if risk is elevated.
High-intent search queries and answers about installing and using this skill.
To analyze a suspicious URL for phishing, this Skill performs dual-mode threat analysis combining static feature extraction, redirect tracing, and evasion checks to deliver rapid risk triage and detailed verdicts.
Homoglyph detection identifies visually identical character substitutions in domains used for spoofing. You need it during URL threat intelligence enrichment when auditing suspicious links in security logs or emails.
Yes, you can integrate domain-analysis and threat-intelligence MCP signals. The Skill queries these external intelligence sources to enrich URL parsing and provide evidence-based risk attribution.
The best way to triage suspicious links in web traffic logs is running the rapid analysis mode for quick URL parsing, phishing indicators, and evasion detection before escalating elevated risks to deep analysis.
Yes, you can configure environment variables for timeouts and user agents. This allows you to customize request behavior during redirect tracking and page content assessment for evasion detection.
Rapid URL analysis limits its scope to static features and quick threat intel queries, whereas deep analysis performs detailed page content assessment, evidence generation, and risk-based expansion recommendations.
timeplus-ioSearch the web privately via a self-hosted SearXNG metasearch engine returning structured JSON results.
ryosukesutoEvaluates bug-bounty reports and drafts responses with severity assessment.
kmshihab7878Automate open-source intelligence collection and structured reconnaissance for usernames, domains, emails, and organizations.
riparinoDetect open redirect abuses and protocol-relative bypasses in web applications.
