run-claude-osint SKILL.md skillF

run-claude-osint from elementalsouls/claude-osint is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add elementalsouls/claude-osint/run-claude-osint@v1.0.0

Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.

Audit grade
F, 16 of 17 checks passed
Kind
SKILL.md skill
Repository
elementalsouls/claude-osint
Path
.claude/skills/run-claude-osint/SKILL.md
Versions recorded
1
Latest version
v1.0.0, committed Aug 8, 2026
Size
4,967 bytes
Repository stars
2,831
License
MIT

Build, validate, and run the claude-osint skills repo — check SKILL.md frontmatter, run the secret_scan.py and h1_reference.py helpers, run sync-skill-content.sh, run the smoke test. Use when asked to run, build, test, validate, or smoke-test claude-osint or its OSINT skills/scripts.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Run: claude-osint

`claude-osint` is **not an app** — it's a Claude *skills package*. Its product
is two `SKILL.md` files (`skills/offensive-osint/`, `skills/osint-methodology/`)
plus two runnable Python helpers under `skills/offensive-osint/scripts/`. There
is no GUI, server, or TUI. "Running it" means: the SKILL.md frontmatter parses
and is complete (that's what Claude loads), and the helper scripts work.

The driver is **`.claude/skills/run-claude-osint/smoke.sh`** — it does all of
that in one shot. **All paths below are relative to the repo root.**

## Prerequisites

Python 3 with PyYAML (already present on this container). If `import yaml` fails:

```bash
pip install pyyaml    # or: apt-get install -y python3-yaml
```

The helpers are stdlib-only otherwise. `h1_reference.py` needs outbound HTTPS to
`hackerone.com`. No build step, no `npm install` — nothing to compile.

## Run (agent path) — the driver

From the repo root:

```bash
.claude/skills/run-claude-osint/smoke.sh           # full smoke (exits 0 on pass)
.claude/skills/run-claude-osint/smoke.sh --no-net  # skip the HackerOne live check
```

It runs six checks and prints a `==> PASS` / `==> FAIL` line (exit 0 / 1):
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add elementalsouls/claude-osint/run-claude-osint@sha256:0b30d03ae84cef6c

The line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_ylzbp7xf3cqj7le2.svg)](https://markdownregistry.com/a/art_ylzbp7xf3cqj7le2)

5 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Aug 8, 2026.

versioncommittedcommitsizeaudit
v1.0.0 latest2026-08-08 bf1f927 4,967 BF view

Audit of the latest version

F  16 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • FAIL, critical: No credential-shaped string (matched: AKIAIOSFODNN7EXAMPLE)
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (4967 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.

Source

GitHub

elementalsouls/claude-osint · 2,831 stars · license MIT · pushed 2026-10-09 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_ylzbp7xf3cqj7le2
GET https://markdownregistry.com/api/v1/resolve?ref=elementalsouls/claude-osint/run-claude-osint
GET https://markdownregistry.com/api/v1/blob/0b30d03ae84cef6c36646502d2a636d91eccb3a3dad163c139a37b0de93e6c38

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from elementalsouls/claude-osint

cloud-saas-exposure SKILL.md skill
elementalsouls/claude-osint · skills/cloud-saas-exposure/SKILL.md · Organization-grade cloud and supply-chain attack-surface discovery: S3/GCS/Azure Blob bucket discovery via…
v1 · audit A · 2,831 stars
continuous-exposure-monitoring SKILL.md skill
elementalsouls/claude-osint · skills/continuous-exposure-monitoring/SKILL.md · Turns one-shot external recon into a continuous monitoring program. Covers the scheduled re-scan-and-diff loop…
v1 · audit A · 2,831 stars
email-domain-security SKILL.md skill
elementalsouls/claude-osint · skills/email-domain-security/SKILL.md · Rigorous, defensible email-spoofability verdict and SPF supply-chain risk analysis computed from published DNS alone…
v1 · audit A · 2,831 stars
exposure-risk-quantification SKILL.md skill
elementalsouls/claude-osint · skills/exposure-risk-quantification/SKILL.md · FAIR-aligned exposure quantification: turns a pile of recon findings into a defensible 0-100 + A-F org risk score…
v1 · audit A · 2,831 stars
identity-provider-recon SKILL.md skill
elementalsouls/claude-osint · skills/identity-provider-recon/SKILL.md · Organization-grade identity-fabric mapping: tenant/federation fingerprinting and the pre-auth user-ENUMERATION oracle…
v1 · audit A · 2,831 stars
offensive-osint SKILL.md skill
elementalsouls/claude-osint · skills/offensive-osint/SKILL.md · Operational arsenal for external red-team and bug-bounty reconnaissance. Concrete wordlists (28 Swagger paths, 13…
v2.2 · audit F · 2,831 stars
org-attack-surface SKILL.md skill
elementalsouls/claude-osint · skills/org-attack-surface/SKILL.md · Org-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint —…
v1 · audit A · 2,831 stars
osint-autopilot SKILL.md skill
elementalsouls/claude-osint · skills/osint-autopilot/SKILL.md · End-to-end external OSINT engagement autopilot. Run the FULL osint-methodology pipeline to completion in ONE go for an…
v1 · audit A · 2,831 stars
osint-methodology SKILL.md skill
elementalsouls/claude-osint · skills/osint-methodology/SKILL.md · Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the…
v2.3 · audit A · 2,831 stars

Every file in elementalsouls/claude-osint

Browse by kind, by grade F, or by owner.