The Agent Skills Directory

[COMMAND_EXECUTION]: Provides example bash commands for DNS and domain enumeration using standard utilities like dig, whois, and curl. A specific example demonstrates querying crt.sh (a well-known certificate transparency log) for subdomain discovery.
[EXTERNAL_DOWNLOADS]: References several established OSINT tools and services such as Sherlock, subfinder, amass, Hunter.io, and HaveIBeenPwned. These are industry-standard resources for security research and reconnaissance.
[DATA_EXFILTRATION]: While the skill involves network operations (via aiohttp and curl), these actions are intrinsic to its stated purpose of OSINT gathering. No patterns suggesting unauthorized exfiltration of sensitive local data (e.g., credentials, SSH keys) were found.
[SAFE]: The Python code snippets provided for username enumeration, email intelligence, and entity correlation are standard boilerplate for asynchronous network requests and data structure management, containing no hidden or malicious logic.
[SAFE]: Includes explicit ethical and legal guidelines, emphasizing the use of publicly available information, respect for robots.txt, and compliance with privacy laws like GDPR.

osint-recon