source-intelligence

This skill should be used when the user mentions "Google dork", "search operator", "inurl:", "filetype:", "intitle:", "site:", "intext:", "dork pattern", "breach forum", "BreachForums", "Exploit.in", "XSS.is", "RaidForums", "forum intelligence", "forum navigation", "seller credibility", "paste site", "Pastebin", "Ghostbin", "paste search", "paste monitoring", "Telegram leak", "Telegram channel", "Discord leak", "channel monitoring", "GitHub secrets", "GitHub scanning", "gitleaks", "trufflehog", "GitLab secrets", "committed credentials", "connection string leak", ".env file leak", "source discovery", "OSINT sources", "leak source", "intelligence gathering", "combolist", "combo list", "credential dump search", or discusses constructing search operator queries to find leaked data, navigating breach forums to locate target-specific listings, scanning paste sites for credentials or PII, monitoring Telegram/Discord channels for fresh leak announcements, scanning GitHub/GitLab repositories for committed secrets and connection strings, or evaluating the credibility of data sellers on underground forums. Always use this skill when the task involves discovering where target data has been leaked or exposed across web and underground sources — for instance, "find if anyone has posted their database on a forum" or "check GitHub for leaked connection strings" or "search paste sites for their credentials" should trigger this skill. It routes source intelligence through hunt-engine.js dork, github, and forum subcommands and logs discoveries via source-tracker.js.