The Agent Skills Directory

[SAFE]: The skill provides documentation and methodologies for using standard external OSINT tools (FOFA, Quake, Hunter). All network operations described are targeted at the official APIs of these well-known search engine services (e.g., fofa.info, quake.360.net, hunter.qianxin.com).
[SAFE]: The skill correctly identifies sensitive file patterns and potential vulnerabilities (like exposed databases or admin panels) as findings during a reconnaissance phase, but it does not attempt to access or exfiltrate local user credentials (such as SSH keys or .env files).
[SAFE]: The use of shell commands (curl) and base64 encoding is standard for interacting with these specific APIs (which require base64-encoded queries). There is no evidence of malicious obfuscation, persistence mechanisms, or unauthorized privilege escalation.
[SAFE]: The skill explicitly instructs the user and agent to follow a "zero-touch" principle, warning against direct scanning or accessing target servers, which aligns with safe OSINT practices.

passive-recon