osint-methodology
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured framework and 'how to think' reference for OSINT and red-team reconnaissance. It consists entirely of markdown instructions and does not contain any executable scripts, automated installation commands, or remote code patterns.
- [SAFE]: Explicit safety guardrails are established in Section 1 (Authorization & Legal Posture) and Section 5 (Do NOT), which include mandatory scope checks and prohibitions against leaking PII, credentials, or session tokens into cloud-hosted AI environments.
- [SAFE]: The methodology incorporates operational security (OpSec) best practices, such as detectability tagging and detection-aware probing (Section 6), ensuring that reconnaissance activities are conducted responsibly and within authorized limits.
- [SAFE]: While the skill references external OSINT services and companion skills, it does not perform automated network requests or data exfiltration. The 'union-query' and 'connector resilience' patterns described are logical instructions for an agent to follow, not implementation code.
Audit Metadata