osint
starsforks
How to install osint?
transilienceai/communitytools/osint
$npx -y skills add transilienceai/communitytools --skill osintOpen-source intelligence gathering - company repository enumeration, secret scanning, git history analysis, employee footprint, and code exposure discovery.
SKILL.md
| 1 | # OSINT |
| 2 | |
| 3 | Passive and semi-passive intelligence gathering focused on code repositories, developer footprints, and exposed secrets across public platforms. |
| 4 | |
| 5 | ## Phases |
| 6 | |
| 7 | ### 1. Organization Discovery |
| 8 | - Enumerate GitHub/GitLab/Bitbucket orgs for target company name variants |
| 9 | - Find employee personal accounts linked to the target org |
| 10 | - Identify archived, forked, and deleted repositories |
| 11 | |
| 12 | ### 2. Repository Analysis |
| 13 | - Map all repos: tech stack, languages, CI/CD, dependencies |
| 14 | - Identify internal hostnames, IPs, endpoints, environment names |
| 15 | - Check for `.env`, config files, secrets in current code |
| 16 | |
| 17 | ### 3. Secret & Credential Scanning |
| 18 | - Scan current code with `gitleaks` / `trufflehog` |
| 19 | - Scan full git history (secrets removed in commits are still accessible) |
| 20 | - Search with targeted dorks (see `reference/repository-recon.md`) |
| 21 | |
| 22 | ### 4. Code Intelligence |
| 23 | - Extract API endpoints, auth patterns, internal service names |
| 24 | - Review Dockerfiles, CI configs, IaC for infra details |
| 25 | - Check dependency files for version-specific CVE candidates |
| 26 | |
| 27 | ## Output |
| 28 | |
| 29 | ``` |
| 30 | data/reconnaissance/repositories.json # Repo inventory + findings |
| 31 | reports/reconnaissance_report.md # OSINT section appended |
| 32 | raw/osint/ # Raw tool outputs |
| 33 | ``` |
| 34 | |
| 35 | ## Tools |
| 36 | |
| 37 | `trufflehog`, `gitleaks`, `gitrob`, GitHub/GitLab search, `gh` CLI, `git log` |
| 38 | |
| 39 | ## Rules |
| 40 | |
| 41 | 1. Passive discovery first (search APIs, public pages) before any cloning |
| 42 | 2. Scan git history — deleted secrets are still in commit objects |
| 43 | 3. Check employee personal accounts, not just org accounts |
| 44 | 4. Document every discovered credential/secret immediately as a finding |
| 45 | 5. All output saved to `{OUTPUT_DIR}/` per CLAUDE.md directory structure |
| 46 | |
| 47 | ## Reference |
| 48 | |
| 49 | - `reference/repository-recon.md` - Dorks, tool commands, secret patterns, workflow |
People who liked this also viewed
6 picksType
- entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API perSkillsJul 2026
- azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: SkillsJul 2026
- azure-rbacOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026
- better-auth-best-practicesAgent skill from better-auth/skillsSkillsJul 2026
- firebase-security-rules-auditorA skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.SkillsJul 2026
- audit-websiteAudit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 15 other rule categories (260+ rules), returns an LLM-opSkillsJul 2026
