ctf-osint

Provides open source intelligence techniques for CTF challenges. Use when gathering information from public sources, social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings, or identifying unknown data like hashes and coordinates.

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

65%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-organized OSINT reference card with concrete commands throughout, but it is held back by a duplicated Quick Start block and, more seriously, by references to three supporting files that are not bundled, breaking progressive disclosure.

Suggestions

Bundle the three referenced files (social-media.md, geolocation-and-media.md, web-and-dns.md) under references/, or remove the links and inline the essential details, so the progressive-disclosure path actually resolves.

Drop or trim the 'Quick Start Commands' section, since its DNS, image-metadata, web-archive, username-lookup, and Shodan entries are already covered in the dedicated sections below — this removes redundant token spend (conciseness).

Add a short explicit decision sequence at the top (e.g., identify data type -> pick technique section -> verify result against the challenge) so the workflow is sequenced rather than left implicit (workflow_clarity).

Dimension	Reasoning	Score
Conciseness	Mostly an efficient one-liner-per-technique reference card, but the 'Quick Start Commands' block duplicates the DNS recon, image metadata, web archive, username lookup, and Shodan sections that appear verbatim below, so it could be tightened.	2 / 3
Actionability	Provides concrete, copy-paste-ready commands ('dig -t any target.com', 'exiftool image.jpg', 'curl "https://web.archive.org/..."', 'shodan search "hostname:target.com"') plus executable formulas such as the Snowflake timestamp decode and the Plus Code character set.	3 / 3
Workflow Clarity	It is a technique catalog rather than a sequenced workflow; the 'When to Pivot' section offers some decision flow, but there are no multi-step sequences or checkpoints, and the per-technique lookup order is implicit.	2 / 3
Progressive Disclosure	The structure is well designed — SKILL.md as overview with clearly signaled one-level-deep links to social-media.md, geolocation-and-media.md, and web-and-dns.md — but none of those referenced files exist (no references/ directory is present), so the disclosure path is broken.	2 / 3
	Total	9 / 12 Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person voice, concrete capability list, explicit 'Use when' triggers, and a distinctive OSINT-CTF niche. It does not over-claim and earns the top anchor on every dimension.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete techniques — 'social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings' — rather than vague language.	3 / 3
Completeness	Answers both 'what' ('Provides open source intelligence techniques for CTF challenges') and 'when' via an explicit 'Use when gathering information from...' trigger clause.	3 / 3
Trigger Term Quality	Natural CTF/OSINT terms a user would actually say ('reverse image search', 'Google dorking', 'Wayback Machine', 'Tor relays', 'FEC filings', 'DNS records') are well covered.	3 / 3
Distinctiveness Conflict Risk	A clear CTF-OSINT niche with distinct, specialized triggers (FEC filings, Tor relays, Wayback Machine) unlikely to fire for adjacent skills.	3 / 3
	Total	12 / 12 Passed

Validation

87%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

Criteria	Description	Result
metadata_version	'metadata.version' is missing	Warning
relative_links	Relative link issues: 29 missing	Warning

	Total	14 / 16 Passed

Repository: ljagiello/ctf-skills
Path: ctf-osint/SKILL.md
Commit: d19f35f

Reviewed: 9 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.