Metabigor OSINT Recon
j3ssie/metabigor
Operates the metabigor CLI to map a target's network ranges, subdomains, ports, related domains, CDNs and archived URLs from free sources without API keys.
Plans and correlates open-source intelligence collection on domains, organizations and infrastructure for authorized investigations and threat intel.
Install Osint Investigator
$ npx skills add criptogus/agent-evolve-network --skill osint-investigator -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install criptogus/agent-evolve-network osint-investigator --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/osint-investigator .claude/skills/osint-investigator && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "osint-investigator" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/osint-investigator into .claude/skills/osint-investigator/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "osint-investigator", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/criptogus/agent-evolve-network/tree/main/skills/osint-investigatorType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add criptogus/agent-evolve-network --skill osint-investigator -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install criptogus/agent-evolve-network osint-investigator --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/osint-investigator .agents/skills/osint-investigator && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "osint-investigator" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/osint-investigator into .agents/skills/osint-investigator/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "osint-investigator", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add criptogus/agent-evolve-network --skill osint-investigator -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install criptogus/agent-evolve-network osint-investigator --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/osint-investigator .cursor/skills/osint-investigator && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "osint-investigator" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/osint-investigator into .cursor/skills/osint-investigator/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "osint-investigator", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/criptogus/agent-evolve-network.git --path skills/osint-investigator--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add criptogus/agent-evolve-network --skill osint-investigator -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install criptogus/agent-evolve-network osint-investigator --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/osint-investigator .gemini/skills/osint-investigator && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "osint-investigator" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/osint-investigator into .gemini/skills/osint-investigator/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "osint-investigator", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install criptogus/agent-evolve-network osint-investigatorInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add criptogus/agent-evolve-network --skill osint-investigator -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/osint-investigator .github/skills/osint-investigator && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "osint-investigator" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/osint-investigator into .github/skills/osint-investigator/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "osint-investigator", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add criptogus/agent-evolve-network --skill osint-investigator -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install criptogus/agent-evolve-network osint-investigator --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/osint-investigator .opencode/skills/osint-investigator && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "osint-investigator" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/osint-investigator into .opencode/skills/osint-investigator/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "osint-investigator", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
osint-investigator- GitHub stars
- 288
- Token cost
- ~1k tokens
- SKILL.md length
- 250 words
- Files
- 1
- Skills in repo
- 107
- Repo updated
- First seen
- Licence
- CC-BY-SA-4.0
At a glance
Plans and correlates open-source intelligence collection on domains, organizations and infrastructure for authorized investigations and threat intel.
- The user asks for osint investigator work
- SKILL.md covers Instructions, Always, Never and Input / output contract, plus 2 more sections
- Calls npx
- Tasks that involve OSINT
What it does
Osint Investigator is an agent skill from criptogus/agent-evolve-network. Plans and correlates open-source intelligence collection on domains, organizations and infrastructure for authorized investigations and threat intel. Use when the user asks for osint investigator work, or mentions osint, investigator.
Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Security, covering OSINT. The licence is CC-BY-SA-4.0.
When your agent uses it
- The user asks for osint investigator work
- Tasks that involve OSINT
Example prompts
- “Use the osint-investigator skill to plan and correlates open-source intelligence collection on domains, organizations and infrastructure for…”
- “/osint-investigator”
Requirements
- Node.js
What it can do on your machine
Read from SKILL.md and the folder at commit d19b920. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
npx
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
superagentskill.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Osint Investigator loads about 1k tokens when it runs. Until then it costs about 63 tokens; SKILL.md has 250 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from criptogus/agent-evolve-network at commit d19b920, republished under its CC-BY-SA-4.0 licence (© criptogus). 250 words, ~1,020 tokens.
Download SKILL.mdSave it as
.claude/skills/osint-investigator/SKILL.md (or your agent's skills folder).- name
- osint-investigator
- description
- Plans and correlates open-source intelligence collection on domains, organizations and infrastructure for authorized investigations and threat intel. Use when the user asks for osint investigator work, or mentions osint, investigator.
- version
- 0.1.0
- license
- CC-BY-SA-4.0
- homepage
- https://superagentskill.com/marketplace/osint-investigator
- source
- Super Agent Skill (SAK)
OSINT Investigator
Use for legitimate OSINT work — threat intelligence, authorized assessments, brand abuse takedowns, CTF challenges. Produces a collection plan, names the public sources to query (whois, DNS, certificate transparency, code search, paste sites, breach indices) and merges results into a structured profile. Refuses targeted investigations on private individuals where the goal looks like harassment or doxing.
Instructions
You are an OSINT analyst. First confirm the objective is lawful and not targeted harassment of a private individual. If it is, refuse and explain why. Then output: (1) collection plan grouped by source category, (2) deconfliction rules to avoid alerting the target, (3) a profile object with fields you can populate from public sources, with a confidence score per field. Never fabricate findings or quote private records you did not retrieve.
Always
- Confirm lawful purpose before producing a plan.
- Tag every profile field with source and confidence.
- Prefer passive sources before active ones.
Never
- Aggregate private data on a private individual for harassment or doxing.
- Fabricate quotes, records or screenshots.
- Recommend account takeover, phishing or social-engineering tactics.
Input / output contract
Input:
{
"type": "object",
"properties": {
"objective": {
"type": "string"
},
"target": {
"type": "string"
}
},
"required": [
"objective",
"target"
]
}Output:
{
"type": "object",
"properties": {
"plan_markdown": {
"type": "string"
},
"profile": {
"type": "object"
}
},
"required": [
"plan_markdown"
]
}Examples
Brand-abuse takedown
Input:
objective: "Find typosquat domains hosting fake login pages for our brand."
target: "examplebank.com"Expected output:
## Purpose check
Defensive brand-protection — proceeding.
## Collection plan
- **DNS / CT logs:** crt.sh `%bank%`, cert search for issuer-mismatched certs.
- **Domain feeds:** dnstwist permutations, URLScan submissions.
## Profile
| Field | Value | Source | Confidence |Executive protection — public exposure check
Input:
objective: "Map publicly available information about our CEO that could enable spear-phishing."
target: "Jane Doe, CEO of ExampleCo (consenting subject, internal request)"Expected output:
## Purpose check
Authorized internal protective-intel request — proceeding with consent on file.
## Collection plan
- **Corporate:** SEC filings, conference talks, podcast appearances.
- **Social:** LinkedIn, public Twitter/X, GitHub.
- **Data-broker leak indicators:** HaveIBeenPwned, public breach corpora.
## Profile
| Field | Value | Source | Confidence |
| Personal email pattern | jane.doe@*** (likely leaked in 2019 breach) | HIBP | High |
| Calendar surface | Speaks at 3+ public events/quarter | Crunchbase + event sites | High |
## Recommendations
- Rotate any password reused across personal accounts.
- Reduce calendar surface by removing past-event reveals where feasible.Trust & telemetry
This skill is graded on the Super Agent Skill network: format, substance and adversarial (prompt-injection) testing produce a public Trust Score.
- Trust Score & evidence: https://superagentskill.com/marketplace/trust/osint-investigator
- Skill page: https://superagentskill.com/marketplace/osint-investigator
- Live version (always current) via MCP: https://superagentskill.com/api/mcp
Reinstall or update with npx skills update, or pull the live graded version with
npx super-agent install osint-investigator.
© criptogus, CC-BY-SA-4.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/osint-investigator of criptogus/agent-evolve-network.
Open the folder on GitHubat commit d19b920
Compare with similar skills
Osint Investigator next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Osint Investigator this skillcriptogus/agent-evolve-network | 288 | — | ~1k | Automated safety check: Pass | CC-BY-SA-4.0 | |
| Metabigor OSINT Reconj3ssie/metabigor | 1.9k | — | ~2.4k | Automated safety check: Pass | MIT | |
| Ctf Osintljagiello/ctf-skills | 3.4k | 2 repos | ~2.3k | Automated safety check: Notes | MIT | |
| ShadowBroker Intelligence ClientBigBodyCobain/Shadowbroker | 11k | — | ~8.9k | Automated safety check: Warn | AGPL-3.0 | |
| Awesome Osint Operatorshoyann/RZK-The-Hunter | 140 | — | ~4.8k | Automated safety check: Pass | CC-BY-SA-4.0 | |
| Run Claude Osintelementalsouls/Claude-OSINT | 2.8k | — | ~1.2k | Automated safety check: Pass | MIT |
Similar skills
Ctf Osint
ljagiello/ctf-skills
Provides open source intelligence techniques for CTF challenges.
ShadowBroker Intelligence Client
BigBodyCobain/Shadowbroker
Lets an agent query a ShadowBroker OSINT platform for tracked flights, ships, satellites and news, and place its findings on the map as intel pins.
Awesome Osint Operator
shoyann/RZK-The-Hunter
Ethical, evidence-first OSINT planning, tool selection, verification, monitoring, reporting, and guarded official wanted/fugitive-person location intelligence using a structured catalog adapted from…
Run Claude Osint
elementalsouls/Claude-OSINT
Build, validate, and run the claude-osint skills repo — check SKILL.md frontmatter, run the secretscan.py and h1reference.py helpers, run sync-skill-content.sh, run the smoke test.
Osint
smixs/osint-skill
Conduct deep OSINT research on individuals. An agent skill from smixs/osint-skill.
More from criptogus/agent-evolve-network
All 107 skills in this repoBrand Research
criptogus/agent-evolve-network
Kickoff research for a brand you haven't worked on before — web research, existing-ad analysis from the Meta Ad Library, editorial-grammar profiling, sourced + AI-generated brand assets, hook/CTA…
Create Apple Notes Video Ad
criptogus/agent-evolve-network
Produce a 9:16 social-native ad recreating the iPhone Apple Notes typing experience — the note begins with 1–2 visible lines, then progressively types additional paragraphs character-by-character…
Create Chatgpt Video Ad
criptogus/agent-evolve-network
Produce a 9:16 social-native ad that recreates a ChatGPT mobile chat — user types in the composer with the iOS keyboard visible, taps send, keyboard slides down, header right-cluster swaps…
Create Imessage Video Ad
criptogus/agent-evolve-network
Produce a 9:16 social-native ad that recreates an iMessage conversation reveal — bubbles pop in over time, composer types char-by-char, real Apple iMessage SFX hit on every send/receive, music bed…
Cloud Misconfig Auditor
criptogus/agent-evolve-network
Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging.
Cloudflare Workers Expert
criptogus/agent-evolve-network
Builds and debugs Cloudflare Workers, Durable Objects, KV, R2, D1, and Queues with edge-correct patterns.
Related
Categories
Questions about Osint Investigator
What does Osint Investigator do?
Plans and correlates open-source intelligence collection on domains, organizations and infrastructure for authorized investigations and threat intel. Osint Investigator is an agent skill from criptogus/agent-evolve-network. Plans and correlates open-source intelligence collection on domains, organizations and infrastructure for authorized investigations and threat intel.
When should I use Osint Investigator?
Osint Investigator fits situations like: the user asks for osint investigator work; tasks that involve OSINT.
How do I install Osint Investigator in Claude Code?
Run `npx skills add criptogus/agent-evolve-network --skill osint-investigator -a claude-code`. Or copy the skill folder (skills/osint-investigator in criptogus/agent-evolve-network) into .claude/skills/osint-investigator in your project. Claude Code loads it when a task matches its description.
How do I install Osint Investigator in Codex?
Run `npx skills add criptogus/agent-evolve-network --skill osint-investigator -a codex`. Or copy the skill folder (skills/osint-investigator in criptogus/agent-evolve-network) into .agents/skills/osint-investigator in your project. Codex loads it when a task matches its description.
Can I use Osint Investigator in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add criptogus/agent-evolve-network --skill osint-investigator -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/osint-investigator, .gemini/skills/osint-investigator, .github/skills/osint-investigator and .opencode/skills/osint-investigator in your project.
What does Osint Investigator need to run?
Going by SKILL.md and its folder, Osint Investigator needs the command-line tools its instructions call (npx). Our summary lists: Node.js.
Does Osint Investigator access the network?
SKILL.md names 1 domain. As links in the text: superagentskill.com. This is read from the text; nothing was executed.
Is Osint Investigator safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Osint Investigator use?
Osint Investigator is published under the CC-BY-SA-4.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Osint Investigator use?
About 1k tokens (SKILL.md is roughly 4.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Osint Investigator?
Skills that share tags, products or a category with Osint Investigator: Metabigor OSINT Recon (j3ssie/metabigor, 1.9k stars), Ctf Osint (ljagiello/ctf-skills, 3.4k stars), ShadowBroker Intelligence Client (BigBodyCobain/Shadowbroker, 11k stars) and Awesome Osint Operator (shoyann/RZK-The-Hunter, 140 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Osint Investigator?
criptogus (a GitHub user) maintains it in criptogus/agent-evolve-network, which has 288 GitHub stars. The repository holds 107 skills in this directory. The repository was last updated on September 9, 2026.
Source: criptogus/agent-evolve-network on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.