Can this skill find leaked secrets in code?

Yes, it provides methodologies for identifying hardcoded API keys, tokens, and passwords in public repositories, Git history, and CI/CD configurations.

Which tools are recommended for use with this skill?

The skill references a wide array of industry-standard tools including Amass for infrastructure, TruffleHog for secrets, and Exiftool for document metadata.

Does this skill perform active scanning or penetration testing?

The skill focuses on passive reconnaissance and 'digital dumpster diving' to assess what an adversary can learn without sending a single packet to your infrastructure.

Is this skill useful for corporate compliance?

Absolutely. It helps organizations identify unintended data leakage, metadata in published documents, and exposed sensitive files that may violate privacy or security policies.

What is the primary goal of the OSINT Exposure Audit skill?

It systematically catalogs publicly available information that could enable an adversary to attack an organization without directly interacting with its internal infrastructure.

OSINT Exposure Audit

Name: OSINT Exposure Audit
Author: plurigrid

byplurigrid

•

Security & Testing

Conducts comprehensive open-source intelligence assessments to identify leaked credentials, exposed infrastructure, and sensitive document metadata.

The OSINT Exposure Audit skill empowers Claude to perform deep reconnaissance and security analysis of an organization's public digital footprint. It provides a structured framework for identifying leaked secrets in Git history, extracting metadata from public documents, mapping DNS infrastructure, and correlating credential breaches without interacting directly with private systems. This skill is essential for security teams performing external attack surface management, pre-engagement pentest reviews, or continuous monitoring for data leakage across code repositories, cloud storage, and social platforms.

Key Features

01Metadata extraction from public documents including author names and internal file paths

02Secret discovery in public code repositories and full Git history

03Social media intelligence gathering for technology stack and org chart reconstruction

047 GitHub stars

05DNS and infrastructure mapping via certificate transparency and subdomain enumeration

06Credential breach correlation and paste site monitoring for organizational domains

Use Cases

01Performing an external attack surface assessment for proactive security hardening

02Executing security due diligence during mergers and acquisitions to identify legacy risks

03Conducting pre-penetration testing reconnaissance to identify potential entry points

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add plurigrid/asi osint-exposure-audit

For use in Claude.ai and ChatGPT

Download Skill