←Leaderboard/Security/OpenOSINT
Last commit on November 5, 2026·Created on May 6, 2026

OpenOSINT/OpenOSINT

“Perform passive reconnaissance and external exposure checks.”
Combined rank
#262
across all skills
In Security
#13
category rank
Stars
1.9k
+1.2% in last 7d
Forks
292
Watchers
17
Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
TL;DR

OpenOSINT provides tools for open-source intelligence gathering and security posture assessment of domains, IP addresses, and organizations.

WHO IT'S FOR
Threat intelligence analysts
perform passive reconnaissance on domains and IPs
Security posture auditors
grade domain exposure and email authentication
AI agent / automation builders
integrate OSINT capabilities via MCP servers
Cybersecurity researchers
investigate email-spoofing and domain registration
Repository contents

2 skill files

Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.

Use this skill collection

Follow the documented setup, then try a first task.

I’m using

Claude Code plugin

Installs: The openosint plugin, including the osint and exposure skills and a passive OpenOSINT MCP server. · Claude Code

Before you start
  • Claude Code
  • uv installed
  • Python 3.10 or newer
  • Network access
  • No API keys needed for the default flow
  1. Enter these commands in a Claude Code session to add the marketplace, install the plugin, and run the documented example investigation on example.com. For your own investigation, use a target you own or are authorized to assess.

    /plugin marketplace add OpenOSINT/OpenOSINT
    /plugin install openosint@openosint
    /openosint:osint example.com
skills/osint/SKILL.md ↗ · Checked Nov 5, 2026site/content/docs/install.md ↗ · Checked Nov 5, 2026README.md ↗ · Checked Nov 5, 2026skills/exposure/SKILL.md ↗ · Checked Nov 5, 2026.claude-plugin/marketplace.json ↗ · Checked Nov 5, 2026

Give it something to do.

Suggested first task

Check a domain's external exposure

Uses exposure

  • Replace [domain] with a domain you own or are authorized to assess.
  • uv and network access are required; no API key is needed.
  • The default TLS and header checks contact the domain on port 443.
Use the exposure skill to check [domain], which I own or am authorized to assess. Report the point-in-time grade and each check's findings with citations. Keep failed or skipped checks visible, and explain that the grade is not a compliance result.
skills/exposure/SKILL.md ↗ · Checked Nov 5, 2026
Suggested first task

Look up an IP and its hostname

Uses osint

  • Replace [IP address] with an IP address you own or are authorized to assess.
  • uv and network access are required.
  • The IP lookup queries ipinfo.io and works without a key at low volume.
Use the osint skill to investigate [IP address], which I own or am authorized to assess. Follow the documented IP workflow: look up the IP, then check DNS for the hostname returned, if any. Write a concise Markdown report with target and scope, cited findings, anything not checked or needing a key, and leads to verify. Keep errors and empty results visible.
skills/osint/SKILL.md ↗ · Checked Nov 5, 2026