osint

Plugin osint from marketplace osint in IPedrax/OSINT. Commands read from the repo's manifest — 5 days ago.

Skills (8)

• osint-corporate

  Corporate and due-diligence collection: company registries and filings, officer and shareholder extraction, beneficial ownership (UBO) tracing through layered and nominee structures, sanctions and PEP screening, adverse media, litigation and insolvency records. Accepts company, company_number, perso

• osint-crypto

  Blockchain and on-chain investigation. Identifies the chain and asset from an address format, reads a transaction, maps the transaction graph, clusters addresses by common-input-ownership and change heuristics, attributes clusters to exchanges and services, and attempts off-chain linkage through nam

• osint-geoint

  Geolocation and chronolocation of a photo, video, coordinate, address, vessel, aircraft or vehicle plate. Establishes WHERE by reading signage, script and language, road markings, utility furniture, vegetation, architecture and plate styles, narrowing on terrain and satellite imagery, and confirming

• osint-identity

  Identity collection play: usernames, email addresses, phone numbers, personal names, social profiles, breach exposure, and self-audit of an own footprint. Enumerates handles across platforms, infers corporate email patterns, validates phone numbers, reads breach-exposure metadata, pivots avatars, an

• osint-infra

  Infrastructure and attack-surface footprint mapping from a domain, subdomain, IP, ASN, netblock, TLS certificate or URL. Enumerates subdomains from certificate transparency, reads RDAP/WHOIS registration, authoritative DNS, passive DNS and historical resolutions, ASN and netblock ownership, mail con

• osint-media

  Image, video and document forensics in one order: provenance first, manipulation second, content third. Extracts file metadata locally, reads C2PA Content Credentials, runs reverse image search across engines whose indexes do not overlap, establishes the earliest indexed instance, pulls video keyfra

• osint-verify

  Claim verification and disinformation analysis on a url, document, photo, video, social profile or named source. Reduces a vague assertion to falsifiable atomic claims, traces each upstream to its earliest instance rather than its loudest repost, establishes provenance and chronology, counts indepen

• osint

  OSINT investigation router. Opens or resumes a case, runs the authorization gate once, dispatches to the right collection department (infra, identity, corporate, geoint, media, crypto, verification), and keeps an auditable evidence ledger with graded confidence. Serves security and threat intel, jou

Slash commands (6)

• /osint:osint-graph

  Validate the case entity graph and render it as a link chart — mermaid by default, Graphviz DOT or a plain-text adjacency summary on request. Runs graph.py --validate first and refuses to draw a chart over a case that fails, because a pretty chart of unvalidated data is worse than no chart. Checks f

• /osint:osint-help

  OSINT plugin router and help. Lists every osint command with its purpose, shows the currently open case, and reports which API keys are detected in this environment plus which sources work with no key at all. Use when the user asks "what OSINT commands do I have", "osint help", "which osint keys are

• /osint:osint-image

  Work a single image or video end to end — synthetic-media and provenance check first, then metadata, reverse image search and earliest instance, then place and time. Routes to /osint:osint-media and only then to /osint:osint-geoint, because geolocating a generated or misdated file produces a confide

• /osint:osint-monitor

  Recurring collection and footprint change detection for an open case. Snapshots a target's observable footprint and diffs two snapshots so you read what changed instead of re-reading everything. Defaults to sources that never touch the target; active polling needs active_allowed plus a fresh confirm

• /osint:osint-report

  Compile the case into a graded deliverable with scripts/report.py, in markdown, HTML or JSON, from scope.md, findings.md, entities.jsonl, events.jsonl, gaps.md, ledger.jsonl and evidence/. Runs the entity-graph validator and the pre-report checklist first, applies the redaction default, and refuses

• /osint:osint-scope

  Open an OSINT case. Intake and authorization gate — records purpose, target, the question being answered, authority, jurisdiction, out-of-bounds and passive/active posture, screens the request against the refusal rules, then scaffolds cases/<slug>/. Run this before any other osint command; no collec

Subagents (2)

• osint-collector

  Fan-out collection worker for an OSINT case that is already open and scoped. Runs ONE department's play (infra, identity, corporate, geoint, media, crypto, verify) against ONE case directory and appends what it collects — ledger rows, entities, events, graded findings, negative results, hash-named e

• osint-critic

  Adversarial reviewer for an OSINT case. Its only job is to attack the case's own findings: missing provenance, a grade the source cannot carry, an inference written as a fact, a wrong or undeclared inference rung, hedging outside the ICD-203 set, banned words, a "disconfirms" field that would discon

Hooks (1)

• SessionStart

  python

Similar plugins