SkillsAdd

masriyan/gemini-security-skills · Archived

osint-recon-automation

OSINT and reconnaissance automation skill for passive collection, pivoting, deduplication, and graph-based analysis using subfinder, amass, dnsx, chaos, crt.sh, github-dorks, waybackurls, gau, gitleaks, trufflehog, theHarvester, h8mail, holehe, sherlock, Shodan, Censys, FOFA, and Hunter.

Installation

$ npx skills add masriyan/gemini-security-skills --skill osint-recon-automation
View on skills.sh ↗ GitHub repository ↗

Summary

  • OSINT and reconnaissance automation skill for passive collection, pivoting, deduplication, and graph-based analysis using subfinder, amass, dnsx, chaos, crt.sh, github-dorks, waybackurls, gau, gitleaks, trufflehog, theHarvester, h8mail, holehe, sherlock, Shodan, Censys, FOFA, and Hunter.
  • Use for asset discovery, exposure monitoring, and authorized reconnaissance only.

Stronger alternatives

This repository is archived — consider an actively maintained alternative.

bug-bounty-workflow Same source · more installs
masriyan/gemini-security-skills

Bug bounty workflow skill for program scope mapping, recon-to-report automation, deduplication …

4 installs
kubernetes-security Same source · more installs
masriyan/gemini-security-skills

Kubernetes and container security skill for cluster hardening, RBAC review, admission control (…

2 installs
cloud-security-automation Same source · more installs
masriyan/gemini-security-skills

Cloud security posture skill for AWS, Azure, GCP, and multi-cloud.

2 installs
claude-mythos-emulation Same source · more installs
masriyan/gemini-security-skills

Assistant-behavior design skill for approximating a Claude-like analytical, careful, conversati…

2 installs

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

playwright-automation-fill-in-form Similar name
github/awesome-copilot

Automate filling in a form using Playwright MCP

13.7K installs
claude-automation-recommender Similar name
anthropics/claude-plugins-official

Analyze a codebase and recommend Claude Code automations (hooks, subagents, skills, plugins, MC…

7.4K installs
pulumi-automation-api Similar name
pulumi/agent-skills

Load this skill when a user asks how to run Pulumi programmatically, embed Pulumi in an applica…

1.1K installs
planetscale-pscale-cli-automation Similar name
planetscale/skills

>- Use the PlanetScale CLI (pscale) from automated agents with --format json, auth check, pscal…

1.1K installs
planetscale-webhook-automation-recommendations Similar name
planetscale/skills

Recommend webhook subscriptions and safe automation patterns for PlanetScale alerts, anomalies,…

13 installs
reddit-automation Similar name
flowkit-labs/skills

Find Reddit threads where people are genuinely asking for what you offer, then draft short, gen…

359.7K installs

Also in this package

Other skills from masriyan/gemini-security-skills · top by installs.

npx skills add masriyan/gemini-security-skills
bug-bounty-workflow 4 kubernetes-security 2 cloud-security-automation 2 claude-mythos-emulation 2 assembly-programming 2 ai-redteam 2 malware-reverse-engineering 1 purple-team-automation 1 threat-intel-fusion 1 soc-operations 1

Browse all from masriyan/gemini-security-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 3
License LICENSE
Default branch main
Open issues 0
Status Archived

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,839 B
  • docs SUMMARY.md 400 B

History

  1. First recorded snapshot · 1 installs

SKILL.md

OSINT Recon Automation

Authorization Boundary

  • Restrict to your own assets, bug bounty programs with explicit scope, or assignments with written authorization.
  • No social engineering, doxing, harassment, or targeting individuals.
  • Respect rate limits and provider terms; never weaponize discovered credentials.

Recon Workflow

  1. Seed: registered domains, ASNs, org names, GitHub orgs, app store handles.
  2. Expand passively: cert transparency, passive DNS, reverse WHOIS, ASN ranges, code search, leaked credential repos, archive snapshots.
  3. Resolve and validate: dnsx, httpx, screenshot with gowitness or aquatone.
  4. Pivot: shared favicons (favfreak), Google Analytics IDs, S3 bucket naming, JS endpoints, ASN neighbors.
  5. Dedupe and graph: build a node-edge model (asset)-[relation]->(asset) and store in Neo4j or JSONL.
  6. Monitor: diff snapshots; alert on new subdomain, new exposed service, leaked secret, or impersonation domain.

Exposure Signals

  • Exposed admin panels, dev/stage hosts, open S3/Blob/GCS, leaked .env, .git/, .DS_Store, swagger, GraphQL introspection, package registry takeover candidates, dangling DNS.

Output Contract

  • seeds.yaml, assets.jsonl, graph.json, screenshots/, exposures.csv, diff/<date>.md.
  • report.md: new exposures since last run with severity and owner.
  • takedowns.md: impersonation domains and reporting paths.