Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Offensive OSINT Methodology · snailsploit | DecimalAI

securityby snailsploit

Offensive OSINT Methodology

snailsploit/offensive-osint

Source snailsploit/claude-red ↗License MIT

Comprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harvesting, social media profiling, GitHub/code leaks, Shodan/Censys enumeration, breach data lookup, employee profiling, infrastructure mapping, cryptocurrency tracing, geospatial intelligence, and AI-assisted analysis workflows.

SkillScore96Maintained

Automatic

Security & AppSec pack

Last verified 9/23/2026

What it changes

Passed 22 of 23 test cases with the skill, and 12 of 23 without it.

Without skill54%

With skill96%

Checks it passed that the model alone missed

Identifies Twint as the fallback tool
Recommends Twint as the fallback scraper
Specifies recording findings in JSONL format

and 10 more in the full report

10 fixed13 passed either way1 still failing0 broke

Pass-rate lift: +42 pp
Tokens: +269%
Agent turns: 0%
Response time: -26%

Model gemini-3.6-flashMeasured 9/23/2026v223 of 24 cases passed with skill · 23 comparable

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/snailsploit-offensive-osint/SKILL.md https://app.decimal.ai/s/snailsploit-offensive-osint/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add snailsploit-offensive-osint, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/snailsploit-offensive-osint/ and pins it in .decimal/skills.lock

decimalai skills add snailsploit-offensive-osint

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/snailsploit-offensive-osint/SKILL.md https://app.decimal.ai/s/snailsploit-offensive-osint/SKILL.md

Raw file: /s/snailsploit-offensive-osint/SKILL.md ↗ · machine-readable summary at /s/snailsploit-offensive-osint.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 9

Prompt

For real-time monitoring of posts across the Bluesky AT Protocol network, which tool provides direct firehose stream access, and which tool maps user follower graphs?

What was checked, without and with the skill
Checked	Without skill	With skill
Recommends Firesky for real-time Bluesky firehose access	Missed	Passed
Recommends SkyView for mapping Bluesky follower graphs	Missed	Passed

case-11 · gemini-3.6-flash · 9/23/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md394 linessingle file

Offensive OSINT Methodology

Workflow

Define target scope (domain, org, person, crypto address, or geo subject)
Select applicable categories below based on scope
Work top-down within each category; pivot on discovered artifacts
Archive every key artifact: URL + timestamp + screenshot (PNG) + hash (SHA-256)
Log findings in JSONL with a run_id and tool versions for reproducibility
Suggest next steps based on what each tool returns

General OSINT

Bookmarks — Comprehensive OSINT bookmarks
OSINT Framework — Tool/resource directory
IntelTechniques Tools — Suite of investigative tools
Bellingcat Toolkit — Investigative journalism tools
CyberSudo OSINT Toolkit — OSINT websites list
Google Dorks — Efficient Google searching
Distributed Denial of Secrets — Leaked data
Country-Specific Resources — Country-targeted OSINT

Search Engines

Tool	Notes
Carrot2	Clusters results by topic
etools	Metasearch engine
Kagi	Privacy-first, non-personalized results
Brave Search	Independent index; Goggles for custom ranking
PDF Search	Search PDF files and view table of contents
Google Fact Check Explorer	Cross-site fact-check search

Username & Email Investigation

| Tool | Purpose |

Track record

Benchmark

22 / 23

test cases passed, vs 12 / 23 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v5 — 9/23/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

snailsploit / claude-red

Skills/recon/offensive-osint/SKILL.md

View on GitHub ↗

License MITImported 9/23/2026Version v2

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

snailsploit/skill-osint-methodology- **Skill Name**: osint-methodologyClose match+12 pp pass-rate lift

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

Offensive OSINT Methodology

Workflow

General OSINT

Search Engines

Username & Email Investigation

Track record

Benchmark

Adoption

SkillSafety

Source

Other skills for the same job

Related skills