A skill for researching a person's publicly available and connected online information and assembling it into a detailed profile. OSINT means intelligence gathered from open sources.

Use it to research a name or online handle, add information to an existing profile, build a personality profile, assess research completeness, or reformat findings.

It organizes scattered information about a person and indicates confidence in the findings, though some listed sources require configured access.

osint — Skill by assafkip

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/assafkip/huntkit/osint

Any agent

npx skills add assafkip/huntkit --skill osint

Clone the repo

git clone --depth 1 https://github.com/assafkip/huntkit

Made for: Claude Code, Codex.

Or install huntkit, the plugin that ships this one along with the rest of its 2 skills, 22 commands, 2 hooks.

Per session 153 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 10,871 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00153	$0.10871
Opus 5	$0.00077	$0.05436
Sonnet 5	$0.00031	$0.02174
Haiku 4.5	$0.00015	$0.01087

Measured 3d ago against content hash d031cb055a04, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

osint scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

The scan reads SKILL.md. This mod also ships 29 executable files (scripts/apify.sh, scripts/brightdata.sh, scripts/capture-evidence.sh, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s "https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-domain?domain=target.com" | jq .

skills/osint/SKILL.md · 847 lines

How it starts

The opening of the file, as written. The whole thing — 847 lines — stays where its author put it; the contents beside it link to each section on GitHub.

OSINT Skill v3.2

Systematic intelligence gathering on individuals. From a name or handle to a scored dossier with psychoprofile, career map, and entry points.

Phase Router

Determine entry point from context:

New name/handle/URL, "пробей", "find out about" → Phase 0 (full cycle)
"Add LinkedIn/Instagram data" to existing dossier → Phase 2 (extraction)
"Build psychoprofile" from existing data → Phase 4
"Rate completeness" of existing dossier → Phase 5
"Reformat" or "present" findings → Phase 6

Default (full research request): Phase 0 → 1 → 1.5 → 2 → 3 → 4 → 5 → 6.

Environment

All API keys via environment variables. Never hardcode tokens.

PERPLEXITY_API_KEY — Perplexity Sonar (fast answers + deep research)
EXA_API_KEY — Exa AI (semantic search, company/people research, deep research)
TAVILY_API_KEY — Tavily (agent-optimized search + extract, $0.005/req basic)
APIFY_API_TOKEN — Apify scraping (LinkedIn, Instagram, Facebook)
JINA_API_KEY — Jina reader/search/deepsearch
PARALLEL_API_KEY — Parallel AI search
BRIGHTDATA_MCP_URL — Bright Data MCP endpoint (full URL with token)
MCPORTER_CONFIG — mcporter config path

Scripts

Run from skill dir: bash scripts/<name>.sh. Each script validates env vars, exits with descriptive error + URL to get the key.

Search & Research:

diagnose.sh — run FIRST. Capability map of all tools.
Perplexity (first-pass default): when operating through Claude, call the MCP tool mcp__perplexity-ask__perplexity_ask directly. It returns an AI answer with citations (equivalent to sonar mode). Use the shell script for search (ranked web results), reason (reconcile contradictions), and deep (long-form research) modes, or from bash pipelines.
perplexity.sh — search <query> | sonar <query> (AI answer) | reason <query> (sonar-reasoning-pro, compare leads / reconcile contradictions) | deep <query> (deep research). Required by first-volley.sh and any bash-only pipeline.
tavily.sh — search <query> (basic $0.005) | deep <query> (advanced) | extract <url>
exa.sh — search <query> | company <name> | people <name> | crawl <url> | deep <prompt>
first-volley.sh "Name" "context" — parallel search, all engines at once.
merge-volley.sh <outdir> — deduplicate and merge first-volley results.

Read the full file on GitHub · 847 lines

Files

What ships with it

37 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

3d ago First seen · 847 lines · 153 tokens per session scan A d031cb055a04

Subscribe to this mod's changes

osint is a skill published in the GitHub repository assafkip/huntkit (51 stars, last pushed 1mo ago), licensed MIT. It adds 153 tokens to every session and 10,871 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Research ach agent-skills anthropic case-management claude claude-code

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

brainstorming

You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.

obra/superpowers · 37 tokens

auto-perf-optimize

Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.

microsoft/vscode · 62 tokens

chat-perf

Run chat perf benchmarks and memory leak checks against the local dev build or any published VS Code version. Use when investigating chat rendering regressions, validating perf-sensitive changes to chat UI, or checking for memory leaks in the chat response pipeline.

microsoft/vscode · 51 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens

osint