メニュー
Use this skill when the user needs OSINT reconnaissance, external attack-surface mapping, secret/credential hunting, subdomain enumeration, cloud exposure assessment, or any authorized open-source intelligence gathering.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
SOC 職業分類に基づく
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/javimosch/supercli --skill claude-osintコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
SKILL.md を表示中
Use this skill when the user wants to search, create, read, or manage Notion pages and databases — search workspace, query databases, create pages, read/write page content as Markdown, manage blocks, users, and files.
Use this skill when the user wants to chat with LLMs from the terminal — OpenAI, Claude, Gemini, local models, RAG, and multi-turn conversations without leaving the shell.
Use this skill when the user wants static analysis for Kotlin code — detect code smells, complexity, style violations, and generate reports for CI pipelines.
| name | claude-osint |
| description | Use this skill when the user needs OSINT reconnaissance, external attack-surface mapping, secret/credential hunting, subdomain enumeration, cloud exposure assessment, or any authorized open-source intelligence gathering. |
2 paired Claude skills (5,500+ lines) for external recon: osint-methodology (how to think) and offensive-osint (what to reach for). Built by ElementalSoul.
git clone https://github.com/elementalsouls/Claude-OSINT.git
sc skills teach claude-osint:quickstart
90+ capabilities across 12 domains:
| Domain | Key Capabilities |
|---|---|
| Asset Discovery | Subdomain source stack (crt.sh + 7 fallback), prefix sweep, Wayback CDX mining, WHOIS/RDAP |
| Identity & SSO | Microsoft Entra fingerprint, M365 deep enum, Okta, ADFS, Google Workspace, AWS account ID |
| Web Attack Surface | Swagger/OpenAPI discovery (28 paths), GraphQL introspection, .git/.env/actuator leak checks |
| Cloud & Container | S3/GCS/Azure bucket arsenal (6x15x47 combos), K8s exposure, CI/CD platform hunting |
| Secret Hunting | 48-pattern secret-regex catalog, GitHub dorks (13 templates), 9 read-only credential validators |
| Breach Intel | HudsonRock Cavalier API, breach × identity correlation |
| Vendor Fingerprinting | Citrix, F5 BIG-IP, Ivanti, PaloAlto, Cisco, VMware, Exchange OWA, KEV/CVE enrichment |
| Email Security | SPF/DMARC/DKIM/BIMI/MTA-STS audit, DMARC vendor inference, 35+ SaaS token patterns |
| Human Intel | LinkedIn employee enum, job postings tech-stack, Slack/Discord discovery |
| Supply Chain | Package-registry leak hunting, typo-squat surveillance, Postman workspace search |
| Reporting | Findings rubric, severity decision matrix (88 examples), attack-path templates (27) |
| Sector-Specific | Healthcare (DICOM/HL7/FHIR), Finance (SWIFT/FIX), ICS/SCADA (Modbus/BACnet), IoT (MQTT/CoAP) |
These skills are intended for assets you own or have written authorization to assess. Skills include soft scope-checking.