Open source intelligence gathering. USE WHEN OSINT, due diligence, background check, research person, company intel, investigate. SkillSearch('osint') for docs.
Before executing, check for user customizations at:~/.claude/skills/CORE/USER/SKILLCUSTOMIZATIONS/OSINT/
If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.
🚨 MANDATORY: Voice Notification (REQUIRED BEFORE ANY ACTION)
You MUST send this notification BEFORE doing anything else when this skill is invoked.
Send voice notification:
curl -s -X POST http://localhost:8888/notify \
-H "Content-Type: application/json" \
-d '{"message": "Running the WORKFLOWNAME workflow in the OSINT skill to ACTION"}' \
> /dev/null 2>&1 &
Output text notification:
Running the **WorkflowName** workflow in the **OSINT** skill to ACTION...
This is not optional. Execute this curl command immediately upon skill invocation.
OSINT Skill
Open Source Intelligence gathering for authorized investigations.
Workflow Routing
Investigation Type
Workflow
Context
People lookup
Workflows/PeopleLookup.md
PeopleTools.md
Company lookup
Workflows/CompanyLookup.md
CompanyTools.md
Investment due diligence
Workflows/CompanyDueDiligence.md
CompanyTools.md
Entity/threat intel
Workflows/EntityLookup.md
EntityTools.md
Trigger Patterns
People OSINT:
"do OSINT on [person]", "research [person]", "background check on [person]"
"who is [person]", "find info about [person]", "investigate this person"
-> Route to Workflows/PeopleLookup.md
Company OSINT:
"do OSINT on [company]", "research [company]", "company intelligence"
"what can you find about [company]", "investigate [company]"
-> Route to Workflows/CompanyLookup.md
Investment Due Diligence:
"due diligence on [company]", "vet [company]", "is [company] legitimate"
"assess [company]", "should we work with [company]"
-> Route to Workflows/CompanyDueDiligence.md
Entity/Threat Intel:
"investigate [domain]", "threat intelligence on [entity]", "is this domain malicious"
"research this threat actor", "check [domain]", "analyze [entity]"
-> Route to Workflows/EntityLookup.md
Authorization (REQUIRED)
Before ANY investigation, verify:
Explicit authorization from client
Clear scope definition
Legal compliance confirmed
Documentation in place
STOP if any checkbox is unchecked. See EthicalFramework.md for details.
Resource Index
File
Purpose
EthicalFramework.md
Authorization, legal, ethical boundaries
Methodology.md
Collection methods, verification, reporting
PeopleTools.md
People search, social media, public records
CompanyTools.md
Business databases, DNS, tech profiling
EntityTools.md
Threat intel, scanning, malware analysis
Integration
Automatic skill invocations:
Research Skill - Parallel researcher agent deployment (REQUIRED)