OSINT Skill
Open Source Intelligence gathering for authorized investigations.
Workflow Routing
| Investigation Type |
Workflow |
Context |
| People lookup |
Workflows/PeopleLookup.md |
PeopleTools.md |
| Company lookup |
Workflows/CompanyLookup.md |
CompanyTools.md |
| Investment due diligence |
Workflows/CompanyDueDiligence.md |
CompanyTools.md |
| Entity/threat intel |
Workflows/EntityLookup.md |
EntityTools.md |
Trigger Patterns
People OSINT:
- "do OSINT on [person]", "research [person]", "background check on [person]"
- "who is [person]", "find info about [person]", "investigate this person"
-> Route to
Workflows/PeopleLookup.md
Company OSINT:
- "do OSINT on [company]", "research [company]", "company intelligence"
- "what can you find about [company]", "investigate [company]"
-> Route to
Workflows/CompanyLookup.md
Investment Due Diligence:
- "due diligence on [company]", "vet [company]", "is [company] legitimate"
- "assess [company]", "should we work with [company]"
-> Route to
Workflows/CompanyDueDiligence.md
Entity/Threat Intel:
- "investigate [domain]", "threat intelligence on [entity]", "is this domain malicious"
- "research this threat actor", "check [domain]", "analyze [entity]"
-> Route to
Workflows/EntityLookup.md
Authorization (REQUIRED)
Before ANY investigation, verify:
STOP if any checkbox is unchecked. See EthicalFramework.md for details.
Resource Index
| File |
Purpose |
EthicalFramework.md |
Authorization, legal, ethical boundaries |
Methodology.md |
Collection methods, verification, reporting |
PeopleTools.md |
People search, social media, public records |
CompanyTools.md |
Business databases, DNS, tech profiling |
EntityTools.md |
Threat intel, scanning, malware analysis |
Integration
Automatic skill invocations:
- Research Skill - Parallel researcher agent deployment (REQUIRED)
- Recon Skill - Technical infrastructure reconnaissance
Agent fleet patterns:
- Quick lookup: 4-6 agents
- Standard investigation: 8-16 agents
- Comprehensive due diligence: 24-32 agents
Researcher types:
| Researcher |
Best For |
| PerplexityResearcher |
Current web data, social media, company updates |
| ClaudeResearcher |
Academic depth, professional backgrounds |
| GeminiResearcher |
Multi-perspective, cross-domain connections |
| GrokResearcher |
Contrarian analysis, fact-checking |
File Organization
Active investigations:
$PAI_DIR/work/scratch/YYYY-MM-DD-HHMMSS_osint-[target]/
Archived reports:
$PAI_DIR/history/research/YYYY-MM/[target]-osint/
Ethical Guardrails
ALLOWED: Public sources only - websites, social media, public records, search engines, archived content
PROHIBITED: Private data, unauthorized access, social engineering, purchasing breached data, ToS violations
See EthicalFramework.md for complete requirements.
Version: 2.3.0
Last Updated: January 2026
1---2name: osint-63description: Open source intelligence gathering. USE WHEN OSINT, due diligence, background check, research person, company intel, investigate.4---56# OSINT Skill78Open Source Intelligence gathering for authorized investigations.910---1112## Workflow Routing1314| Investigation Type | Workflow | Context |15|-------------------|----------|---------|16| People lookup | `Workflows/PeopleLookup.md` | `PeopleTools.md` |17| Company lookup | `Workflows/CompanyLookup.md` | `CompanyTools.md` |18| Investment due diligence | `Workflows/CompanyDueDiligence.md` | `CompanyTools.md` |19| Entity/threat intel | `Workflows/EntityLookup.md` | `EntityTools.md` |2021---2223## Trigger Patterns2425**People OSINT:**26- "do OSINT on [person]", "research [person]", "background check on [person]"27- "who is [person]", "find info about [person]", "investigate this person"28-> Route to `Workflows/PeopleLookup.md`2930**Company OSINT:**31- "do OSINT on [company]", "research [company]", "company intelligence"32- "what can you find about [company]", "investigate [company]"33-> Route to `Workflows/CompanyLookup.md`3435**Investment Due Diligence:**36- "due diligence on [company]", "vet [company]", "is [company] legitimate"37- "assess [company]", "should we work with [company]"38-> Route to `Workflows/CompanyDueDiligence.md`3940**Entity/Threat Intel:**41- "investigate [domain]", "threat intelligence on [entity]", "is this domain malicious"42- "research this threat actor", "check [domain]", "analyze [entity]"43-> Route to `Workflows/EntityLookup.md`4445---4647## Authorization (REQUIRED)4849**Before ANY investigation, verify:**50- [ ] Explicit authorization from client51- [ ] Clear scope definition52- [ ] Legal compliance confirmed53- [ ] Documentation in place5455**STOP if any checkbox is unchecked.** See `EthicalFramework.md` for details.5657---5859## Resource Index6061| File | Purpose |62|------|---------|63| `EthicalFramework.md` | Authorization, legal, ethical boundaries |64| `Methodology.md` | Collection methods, verification, reporting |65| `PeopleTools.md` | People search, social media, public records |66| `CompanyTools.md` | Business databases, DNS, tech profiling |67| `EntityTools.md` | Threat intel, scanning, malware analysis |6869---7071## Integration7273**Automatic skill invocations:**74- **Research Skill** - Parallel researcher agent deployment (REQUIRED)75- **Recon Skill** - Technical infrastructure reconnaissance7677**Agent fleet patterns:**78- Quick lookup: 4-6 agents79- Standard investigation: 8-16 agents80- Comprehensive due diligence: 24-32 agents8182**Researcher types:**83| Researcher | Best For |84|------------|----------|85| PerplexityResearcher | Current web data, social media, company updates |86| ClaudeResearcher | Academic depth, professional backgrounds |87| GeminiResearcher | Multi-perspective, cross-domain connections |88| GrokResearcher | Contrarian analysis, fact-checking |8990---9192## File Organization9394**Active investigations:**95```96$PAI_DIR/work/scratch/YYYY-MM-DD-HHMMSS_osint-[target]/97```9899**Archived reports:**100```101$PAI_DIR/history/research/YYYY-MM/[target]-osint/102```103104---105106## Ethical Guardrails107108**ALLOWED:** Public sources only - websites, social media, public records, search engines, archived content109110**PROHIBITED:** Private data, unauthorized access, social engineering, purchasing breached data, ToS violations111112See `EthicalFramework.md` for complete requirements.113114---115116**Version:** 2.3.0117**Last Updated:** January 2026