Updated 3w ago
by 7onez
cti-expert
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.
611 GitHub stars (611)
+10 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | +1 |
| Oct 2 | +3 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | +2 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | +1 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | +1 |
| Oct 14 | +2 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 1 skill (1 skills found in its SKILL.md files)
- 88 forks (88 forks)
- 3w ago last update (Last updated 3w ago)
Install
Skills CLI
npx skills add 7onez/cti-expert
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/7onez/cti-expertcp -r "cti-expert" ~/.claude/skills/cti-expert
Copies the cti-expert skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add 7onez/cti-expert
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
cti-expert
Cyber threat intelligence and OSINT analysis toolkit. Runs structured investigations and delivers analyst-grade intelligence products with sourced, trust-scored findings. Use for OSINT and CTI cases, digital-footprint and exposure review, domain/subdomain/DNS/certificate recon, web-infrastructure pivoting (favicon hashes, tracker IDs, TLS certs, phishing-kit fingerprinting, campaign clustering),…
SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.