Total 52,033 skills, Security & Compliance has 2053 skills
Showing 12 of 2053 skills
A general skill for performing security reviews and auditing codebases for vulnerabilities. ALWAYS run this at the end of each task.
Check and interpret data-breach exposure for an email, username, or phone. Use when checking Have I Been Pwned, investigating breach or leak exposure, finding which services an account used, or assessing credential compromise.
Deep-dive a social media profile — map the account, its network and content, extract location and pattern-of-life signals, and pivot to other identities.
Start-here router for any OSINT investigation. Names the workflow and knowledge skills and picks the right one for a given starting selector.
Look up companies, officers, and ownership in official business registries and filings. Use when researching a company's legal entity, finding directors/shareholders/beneficial owners, checking incorporation records, or reading SEC/regulatory filings.
Compile OSINT findings into a professional, sourced, and timestamped intelligence report that separates confirmed facts from inference.
Operational security for investigators — create and maintain research accounts and browse without exposing your identity. Use when setting up a sockpuppet or research persona, avoiding attribution while investigating, or hardening a browsing environment.
Investigate an email address — validate it, find linked accounts and breaches, and pivot to the owner's identity, usernames, and other contact selectors.
Passive reconnaissance workflow for a domain, website, or IP — maps DNS, subdomains, infrastructure, tech stack, history, and ownership without touching the target.
Workflow to build a sourced profile of a named individual from public sources, pivoting across identity, contact, social, and location selectors.
Mine GitHub, GitLab, and git history for people, infrastructure, and leaked secrets. Use when investigating a developer or org on GitHub, finding leaked API keys or credentials in code, or pivoting from commits, emails, and repos.
Look up domain registration and DNS records. Use when running WHOIS/RDAP, querying DNS records (A, MX, TXT, NS, SPF, DKIM, DMARC), finding a domain's registrant, nameservers, or mail setup, or resolving IPs and ASNs.