← All skills
osint-recon
90 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By fb0sh/pentester (GitHub) · security · 24 stars · scanned at commit 97a6d9a
Phase 1 conditional OSINT depth — four-dimension model (server→site→domain→people; people is conditional). Skill-gate companion to pentester-enum-services / pentester-recon. Use for passive OSINT depth, full recon dimensions, author tracking, not as Phase 0/Schema replacement.
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: crt.sh, api.github.com
The author does not mention this. Expected for a security skill.
Found in 29 places.
Show 17 more
- .agents/skills/third-party/osint-recon/SKILL.md, line 150
r2 = requests.get(url + "/?id=1' OR 1=1--") - .agents/skills/third-party/osint-recon/SKILL.md, line 163
r = requests.get(f"https://crt.sh/?q={ip}&output=json") - .agents/skills/third-party/osint-recon/references/author-tracking.md, line 70
r = requests.get(f"https://api.github.com/users/{username}") - .agents/skills/third-party/osint-recon/references/author-tracking.md, line 91
r = requests.get(f"https://api.github.com/users/{username}/repos?per_page=100") - .agents/skills/third-party/osint-recon/references/author-tracking.md, line 113
r = requests.get(f"https://api.github.com/repos/{username}/{repo}/commits?per_page=10") - .agents/skills/third-party/osint-recon/references/osint-toolkit.md, line 13
r = requests.get(url, timeout=30) - .agents/skills/third-party/osint-recon/references/osint-toolkit.md, line 44
r = requests.get(url, params=params, headers=headers) - .agents/skills/third-party/osint-recon/references/osint-toolkit.md, line 113
r = requests.get(url, timeout=10) - .agents/skills/third-party/osint-recon/references/osint-toolkit.md, line 176
r = requests.get(url, timeout=10) - .agents/skills/third-party/osint-recon/references/osint-toolkit.md, line 206
r = requests.get(f"https://crt.sh/?q={ip}&output=json", timeout=30) - .agents/skills/third-party/osint-recon/references/osint-toolkit.md, line 298
r = requests.get(url, headers=headers, timeout=10) - .agents/skills/third-party/osint-recon/references/server-recon.md, line 96
r = requests.get(f"https://crt.sh/?q=%.{domain}&output=json") - .agents/skills/third-party/osint-recon/references/server-recon.md, line 160
r = requests.get(f"{target}/server-status") # 403 = 存在 - .agents/skills/third-party/osint-recon/references/server-recon.md, line 161
r = requests.get(f"{target}/server-info") # 403 = 存在 - .agents/skills/third-party/osint-recon/references/server-recon.md, line 163
r = requests.get(f"{target}/nginx_status") # 可能暴露状态 - .agents/skills/third-party/osint-recon/references/server-recon.md, line 165
r = requests.get(f"{target}/manager/html") # 管理界面 - .agents/skills/third-party/osint-recon/references/server-recon.md, line 167
r = requests.get(f"{target}/aspnet_client/") # ASP.NET 特征
and 9 more places
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 2 places.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'osint-recon' ] || [ -L ~/.agents/skills/'osint-recon' ]; then echo 'A skill folder named osint-recon already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/fb0sh/pentester' "$d" && git -C "$d" checkout --quiet '97a6d9a6d574a746c3d53d6150440074035a3b0a' -- '.agents/skills/third-party/osint-recon' && mkdir -p ~/.agents/skills && cp -R "$d"/'.agents/skills/third-party/osint-recon' ~/.agents/skills/'osint-recon' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'osint-recon' ~/.claude/skills/'osint-recon' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for fb0sh/pentester shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/fb0sh/pentester/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | 97a6d9a | 90 |