Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    OSINT Methodology: From Objective to Sourced Report

    1

    An OSINT pass without structure turns into forty open tabs and a conclusion you cannot defend later.

    $6.99

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    OSINT Methodology: From Objective to Sourced Report

    OSINT Methodology: From Objective to Sourced Report

    Example session with this skill installed

    Scope an external OSINT pass on example.com for a red team: what do I collect, in what order, and how do I keep the evidence clean?

    • Read your context and instructions
    • Compiled the osint methodology

    OSINT campaign plan: example.com external pass

    Shape of the pass (example run): Start from the domain, pivot outward through infrastructure and people, and hash every artifact as you go.

    Plan

    StageAction
    ObjectiveMap the external attack surface and key personnel
    OPSECSock-puppet accounts, isolated browser, VPN egress
    Seeds1 root domain, 4 named staff from public filings
    Infra pivotscrt.sh subdomains, Shodan and Censys services, passive DNS
    People pivotsUsername reuse, breach metadata, document metadata

    Correlation so far

    Two staff reuse the same handle across a code host and a forum, which links a personal email to a work identity. Record it with the source URL and the capture time.

    Evidence hygiene

    Every capture gets a SHA-256 and a UTC timestamp and is archived before it enters the report. No live capture is cited without its hash.

    Next

    Hand the infrastructure list to recon and the identity map to pretext planning, each with sources attached.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    An OSINT pass without structure turns into forty open tabs and a conclusion you cannot defend later. The fixes are a clear objective, the right pivots in order, and evidence you can stand behind. This skill gives your agent that structure and keeps the chain of custody clean from the first capture.

    What your agent does

    • Sets objective and OPSEC: intelligence goals, scope boundaries and posture (sock puppets, isolated browser or VM, VPN or Tor).
    • Enumerates core identifiers: domains, IPs, ASNs, organizational filings and key personnel handles.
    • Pivots across sources: passive DNS, Certificate Transparency with crt.sh, Shodan and Censys, and historical archives like Wayback and URLScan.
    • Correlates identity artifacts: username reuse, breach metadata, public code commits and document metadata.
    • Preserves chain of custody: SHA-256 hashes, UTC timestamps and archived captures before anything reaches the report.

    Built-in guard rails

    • Plans, does not scrape for you: it structures the campaign and the correlation. You run the lookups within your authorization.
    • No credentials embedded: Shodan or Censys keys, if you use them, stay in your own environment.
    • Lawful, authorized scope: it enforces OPSEC and chain of custody; it does not decide your legal authority.

    What's inside

    One SKILL.md of about 2,800 words across 12 sections, covering scoping, collection, correlation and evidence hygiene, plus a LICENSE.txt.

    Works with Claude Code, Codex, Cursor, and any agent that loads SKILL.md.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for Security.

    It guides collection and correlation; it does not scrape or de-anonymize anyone for you. Source accounts (Shodan, Censys) and an OPSEC browser are yours to set up. Use it only within a lawful, authorized scope.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 1 day ago

    Software
    Claude Code
    orCodex
    orCursor
    Optional
    Shodan
    orCensys account
    Certificate Transparency searchweb archive access
    isolated browser
    orVM for OPSEC

    Permissions

    Network Access
    Listed1 day ago

    What's inside

    Frequently Asked Questions

    No. It plans the campaign and structures what you gather. You run the lookups within your authorization.

    No. Shodan or Censys keys, if you use them, stay in your own environment.

    An agent that loads SKILL.md, plus your own source accounts and an isolated browser for OPSEC.

    Only within a lawful, authorized scope. It enforces OPSEC and chain of custody, it does not decide your legal authority.

    New in Security