<Devsly/>
NotebookLM Watermark Remover
Remove the NotebookLM watermark from PDF slide exports — free, unlimited, and 100% in your browser.
View
NotebookLM Video Watermark Remover
Remove the NotebookLM watermark from every frame of your MP4 and auto-trim the end card — free and unlimited.
View
Gemini Watermark Remover
Remove the Gemini (Veo) sparkle watermark from every frame of your AI-generated MP4 — free and unlimited.
View
MCP https://devsly.io/mcp MCP Tools Best Skills API Docs
Devsly

Keyboard Shortcuts

Navigation

Quick Search
⌘ / Ctrl + K
Toggle Dark Mode
⌘ / Ctrl + D
Close Dialogs
Esc

Tool Actions

Execute / Process
⌘ / Ctrl + Enter
Clear Input
⌘ / Ctrl + Shift + C
Copy Output
⌘ / Ctrl + Shift + X

Editor

Select All
⌘ / Ctrl + A
Undo
⌘ / Ctrl + Z
Redo
⌘ / Ctrl + Shift + Z

Updated 6d ago

by elementalsouls

Claude-OSINT

8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.

  • Active — Updated in the last 14 days
Works with
  • Claude
View on GitHub (opens in a new tab)

2.8k GitHub stars (2,822)

+150 in 20 days

Stars gained per day · daily snapshots since Sep 26
Stars gained per day, Sep 26 to Oct 16: +150 in total; the busiest day was Oct 4 with +32 stars.Sep 27: +3 starsSep 28: +5 starsSep 29: +14 starsSep 30: +9 starsOct 1: +2 starsOct 2: +10 starsOct 3: +10 starsOct 4: +32 starsOct 5: +11 starsOct 6: +4 starsOct 7: +11 starsOct 8: +3 starsOct 9: +5 starsOct 10: +5 starsOct 11: +2 starsOct 12: +5 starsOct 13: +3 starsOct 14: +7 starsOct 15: +5 starsOct 16: +4 stars
Stars gained between daily snapshots
PeriodNew stars
Sep 27+3
Sep 28+5
Sep 29+14
Sep 30+9
Oct 1+2
Oct 2+10
Oct 3+10
Oct 4+32
Oct 5+11
Oct 6+4
Oct 7+11
Oct 8+3
Oct 9+5
Oct 10+5
Oct 11+2
Oct 12+5
Oct 13+3
Oct 14+7
Oct 15+5
Oct 16+4
  • 10 skills (10 skills found in its SKILL.md files)
  • 516 forks (516 forks)
  • 6d ago last update (Last updated 6d ago)

Install

Skills CLI

npx skills add elementalsouls/Claude-OSINT

Asks which skills and agents to install. Just one: npx skills add elementalsouls/Claude-OSINT --skill cloud-saas-exposure — add -g for every project.

Claude Code

git clone https://github.com/elementalsouls/Claude-OSINTcp -r "Claude-OSINT/skills/cloud-saas-exposure" ~/.claude/skills/

Copies the cloud-saas-exposure skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.

Plugin

/plugin marketplace add elementalsouls/Claude-OSINT

Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.

Skills can run code on your machine — read the SKILL.md first.

What it does

In the author's own words, from each skill's SKILL.md.

  • cloud-saas-exposure

    Organization-grade cloud and supply-chain attack-surface discovery: S3/GCS/Azure Blob bucket discovery via observed-name mining (CNAME/cert-SAN/Wayback) and bounded two-class permutation (6 prefixes x 15 suffixes on trusted tokens, bounded target-bound expansion on subdomain stems), existence (HEAD/GET) vs public-listing confirmation, object-key triage into 9 value tiers (database dumps, credenti…

    skills/cloud-saas-exposure/SKILL.md on GitHub (opens in a new tab)

  • continuous-exposure-monitoring

    Turns one-shot external recon into a continuous monitoring program. Covers the scheduled re-scan-and-diff loop (baseline snapshot -> interval sleep -> re-scan -> asset/finding delta -> threshold-gated webhook alert), the scan-to-scan diff engine (new/removed/changed assets by a tracked-attribute table, new/resolved findings by a stable cross-scan fingerprint), adversary CTI / chatter monitoring a…

    skills/continuous-exposure-monitoring/SKILL.md on GitHub (opens in a new tab)

  • email-domain-security

    Rigorous, defensible email-spoofability verdict and SPF supply-chain risk analysis computed from published DNS alone. Deepens the record-level SPF/DMARC/DKIM/BIMI/MTA-STS/DNSSEC fetch recipes in the offensive-osint arsenal (§16.14) with the reasoning that section doesn't do: a priority-ordered composite verdict for whether an attacker can actually land header-From-spoofed mail in an inbox, and by…

    skills/email-domain-security/SKILL.md on GitHub (opens in a new tab)

  • exposure-risk-quantification

    FAIR-aligned exposure quantification: turns a pile of recon findings into a defensible 0-100 + A-F org risk score (Likelihood x Impact, three ownership-aware factors: exposure/threat/impact), an ownership + proof demotion cap so unproven or weakly-owned findings can't inflate the number, a $-denominated FAIR loss-magnitude estimate (IBM/Ponemon per-record cost bands, cross-source record dedup, th…

    skills/exposure-risk-quantification/SKILL.md on GitHub (opens in a new tab)

  • identity-provider-recon

    Organization-grade identity-fabric mapping: tenant/federation fingerprinting and the pre-auth user-ENUMERATION oracle methodology — enumeration and fingerprint only, never credential submission. Covers domain-to-tenant resolution (Microsoft getuserrealm.srf Managed/Federated namespace check, Entra OIDC metadata tenant-GUID extraction, Autodiscover v2), keyless Microsoft tenant-federation mapping…

    skills/identity-provider-recon/SKILL.md on GitHub (opens in a new tab)

  • offensive-osint

    Operational arsenal for external red-team and bug-bounty reconnaissance. Concrete wordlists (28 Swagger paths, 13 GraphQL paths, 35 high-risk ports, 6 missing-header findings, 15 always-on HTTP checks, 5 SAML paths, cloud bucket permutations, JS guess-paths, vendor product fingerprints for Citrix/F5/Pulse/Fortinet/Cisco/PaloAlto/VMware/Exchange, cloud-native service fingerprints, container/K8s ex…

    skills/offensive-osint/SKILL.md on GitHub (opens in a new tab)

  • org-attack-surface

    Org-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint — corporate family -> owned domains -> owned netblocks/ASN -> live assets — with attribution discipline, not just DNS breadth. The org-first attribution pyramid (legal entity -> LEI/registration -> corporate family -> owned domains -> owned netblocks/ASN -> live assets). Corporate-iden…

    skills/org-attack-surface/SKILL.md on GitHub (opens in a new tab)

  • osint-autopilot

    End-to-end external OSINT engagement autopilot. Run the FULL osint-methodology pipeline to completion in ONE go for an authorized domain — engagement folder, Stages 1-5 (seed, expansion, enrichment, exposure, convergence), multi-agent per-host content+JS fan-out, headline verification, auto-generated findings, and a consolidated multi-tab .xlsx deliverable. Stops ONLY for Stage 6 (active exploita…

    skills/osint-autopilot/SKILL.md on GitHub (opens in a new tab)

  • osint-methodology

    Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the 6-stage recon pipeline (seed → asset expansion → enrichment → exposure analysis → convergence → operator-armed active validation) with connector-resilience and stage-vs-gating discipline, asset-graph discipline, severity rubric, confidence upgrade workflows, time budgeting, ident…

    skills/osint-methodology/SKILL.md on GitHub (opens in a new tab)

  • run-claude-osint

    Build, validate, and run the claude-osint skills repo — check SKILL.md frontmatter, run the secret_scan.py and h1_reference.py helpers, run sync-skill-content.sh, run the smoke test. Use when asked to run, build, test, validate, or smoke-test claude-osint or its OSINT skills/scripts.

    .claude/skills/run-claude-osint/SKILL.md on GitHub (opens in a new tab)

Review before you install

A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.