🕵️ OSINT Skills Open source intelligence, run by your AI agent. Reconnaissance · Attribution · GEOINT · Breach checks · Due diligence 28 skills that let Cursor, Claude, and other coding agents actually run an open source intelligence investigation — pivot from an email to a breach to a reused handle to a real name, geolocate a photo from the pixels, map a company's subsidiaries — and write it up with sources instead of vibes. Two kinds: 10 you run by name — end to end workflows for a person, company, domain, username, email, phone, photo, or social account. 18 the agent reaches for on its own — the individual techniques those workflows lean on (reverse image search, WHOIS, certificate transparency, breach lookups, chronolocation, and so on). You point it at a target. It picks the workflow, chains the techniques, and hands back a report where every claim has a source and a confidence level. These aren't cheat sheets. Every skill carries the tradecraft that separates a lead from a finding — where each source lies to you, which results are artefacts of how the tool works, and what it takes to call something confirmed. Each one ships with reference/ material too: the query cookbooks, per country indicator guides, registry catalogues, and format tables you'd otherwise keep in a browser tab. What a run looks like [安装/使用命令见下方] Illustrative — a real run depends on the target and which tools you have keys for. The skills are the technique and the tooling; some tools (Shodan, HIBP, DeHashed) want their own API key, and free alternatives are called out inline. Install [安装/使用命令见下方] install.sh symlinks all 28 skills into /.cursor/skills , so git pull keeps them current. Restart your agent afterward. Command Installs to ./install.sh /.cursor/skills (symlink) ./install.sh copy same, but copies ./install.sh claude /.claude/skills ./install.sh target DIR anywhere For a single project instead of your whole machine, drop the skills/ folder into that repo's .cursor/skills/ . Where to s