Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add winstonkoh87/Athena-Public --skill operational-osintgit clone --depth 1 https://github.com/winstonkoh87/Athena-PublicWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/winstonkoh87/athena-public/operational-osint)<a href="https://agentmods.dev/skills/winstonkoh87/athena-public/operational-osint"><img src="https://agentmods.dev/badge/skills/winstonkoh87/athena-public/operational-osint/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/winstonkoh87/athena-public/operational-osint"><img src="https://agentmods.dev/badge/skills/winstonkoh87/athena-public/operational-osint.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00031 | $0.01696 |
| Opus 5.5 | $0.00012 | $0.00678 |
| Sonnet 5.5 | $0.00006 | $0.00339 |
| Haiku 4.5 | $0.00003 | $0.00170 |
Grade A, and why
operational-osint scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 127 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Operational OSINT (Counterparty Due Diligence & OPSEC Engine)
"Open-source intelligence is cheap and infinite. In closed games it illuminates the board; in open games it is merely the surface lexicon. Subordinate Tier 1 surface surveillance to Tier 2 physical cash/inventory flows and Tier 3 sovereign enforcement power." — Protocol 580
This skill automates the 5-Layer Counterparty OSINT Stack and technical digital reconnaissance to vet contractors, high-ticket clients, corporate entities, and platforms before capital, contracts, or credentials are committed. It also performs Protective OPSEC Audits to secure the operator's digital footprint.
Triggers
Activate whenever the user:
- Asks to "vet", "check", or "investigate" a company, contractor, vendor, client, or partner.
- Mentions corporate due diligence, ACRA checks, court/litigation sweeps, or background research on an entity.
- Requests domain/URL reconnaissance, phishing payload analysis, or digital footprint mapping.
- Asks to perform an OPSEC review, digital exposure audit, or doxxing vulnerability check.
Phase 1: Intake & Reconnaissance Scoping
Identify the target entity and primary risk vector:
| Entity Type | Primary Risk Vector | Target Threshold | Required Checks |
|---|---|---|---|
| Commercial Contractor / Interior Design | Deposit abscondment, sub-contractor default, insolvency | >S$10,000 CapEx | Full 5-Layer Stack (ACRA, Forums, XHS, INLIS, HDB DRC) |
| High-Ticket Freelance / Consulting Client | Payment refusal, scope inflation, regulatory exposure | >S$1,000 Contract | ACRA / Corporate status, LinkedIn, eLitigation, Payment terms |
| Joint Venture / Co-Founder / Business Partner | Serial shell phoenixing, debt encumbrances, reputation drag | High Variance | People Profile director history, debt charges, lifestyle audit |
| Digital Domain / Inbound Link / Web Platform | Credential phishing, brand impersonation, proxy cloaking | Law #1 Ruin | WHOIS, DNS records, HTTP redirection trace, DMARC |
| Self-Audit (Operator OPSEC) | Asset disclosure, statutory bounty exposure, doxxing | Sovereignty | Phone/email footprint, public registry leaks, EXIF metadata |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 127 lines · 31 tokens per session scan A a44c79d5bb63
operational-osint is a skill published in the GitHub repository winstonkoh87/Athena-Public (614 stars, last pushed today), licensed MIT. It adds 31 tokens to every session and 1,696 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-06.
Other skills, from other repositories
playwright
Use when the task requires capturing or automating a real browser from the terminal.
pydantic-ai
Build production-ready AI agents with PydanticAI — type-safe tool use, structured outputs, dependency injection, and multi-model support.
prior-auth-packet-builder
Build a concise prior authorization packet from local case files and payer policy docs.
csv-workbench
Analyze CSV files in /mnt/data and return concise numeric summaries.
interview-question-preparer
Prepare an evidence-backed blog/media interview preparation brief for a specified person by researching public context, reflecting on information sufficiency, and writing the final Markdown deliverable.
Market Research Brief
Generate a structured market research brief from a feature idea and supplied business context: market landscape, competitor intelligence, opportunity assessment, and a go-to-market recommendation. Use for market, research, competitor, and product launch requests.