Last commit on October 22, 2026·Created on April 6, 2026
7onez/cti-expert
“Investigate cyber threats using open-source intelligence.”
Combined rank
#540
across all skills
Stars
622
+0.7% in last 7d
Forks
90
+1.1% in last 7d
Watchers
7
0.0% in last 7d
Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
TL;DR
This toolkit provides a framework for conducting cyber threat intelligence and open-source intelligence operations. It helps security researchers and DFIR teams move from raw data collection to analyst-grade intelligence products through a structured lifecycle of acquisition and enrichment.
The skill automates complex reconnaissance tasks, including web-infrastructure pivoting via favicon hashes and TLS certificates, infostealer log triage, and Sinophone recon using ICP filings and PRC corporate registries.
WHO IT'S FOR
Threat Intelligence Analysts
running structured CTI and OSINT investigations
Digital Forensics and Incident Response (DFIR) teams
triaging breach data and infostealer logs
Security Researchers
performing web-infrastructure pivoting and reconnaissance
Corporate Security and Risk Officers
conducting digital-footprint and exposure reviews
Claude
Codex
Cursor
Gemini CLI
Copilot
Windsurf
Amp
OpenCode
Qwen Code
DeepSeek
Factory DroidWant to install it?
Claude Marketplace · Claude Plugin · CLI Installer · Clone to Claude · Symlink to AgentRepository instructions