Browse Skills

Breaks a plan, spec, or conversation into tracer-bullet tickets with blocking edge declarations, published to an issue tracker.

Plan a huge chunk of work — more than one agent session can hold — as a shared map of decision tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.

Dig Through Data Brokers uses people-search sites and public records to turn a name into candidate addresses, phones, relatives, and background details, then confirm them against primary sources. Use it for skip tracing, reverse address lookups, self-audits, and broker data removal.

Find Exposed Servers uses Shodan, Censys, and similar scan data to identify internet-facing hosts, ports, services, and devices without touching the target. Use it for exposure checks, origin-IP pivots, and Shodan query syntax.

Find Hidden Subdomains enumerates an organization’s subdomains and sibling domains from Certificate Transparency logs and passive DNS without sending traffic to the target. Use it to map hostnames, find staging or admin systems, and spot newly issued certificates.

Find Leaks In The Wild helps check whether a name, email, domain, or credential is circulating in pastes, forums, and Telegram, and whether a claimed leak is genuine or a recycled combolist. Use it for breach triage, threat intelligence, and leak monitoring.

Find The Original Image uses multiple reverse image search engines to trace an image to its earliest known publication and read the source page. Use it to identify photos, logos, places, profile pictures, reposts, or video keyframes.

Investigate Without Getting Made helps investigators reduce attribution risk by separating research identity from real identity and managing IP, browser, TLS, timing, and account exposure. Use it when viewing sensitive targets, creating personas, or choosing between VPN, proxy, or Tor.

Copy approved design prototypes into the repo, verify artifact completeness, and request explicit lock approval before derivation begins.

Passive Domain Recon builds an asset inventory for a domain, website, or IP from registration, DNS, subdomains, infrastructure, history, and ownership without contacting the target. Use it to profile an organization, assess exposure, or investigate a suspicious site quietly.

Read Deleted Pages recovers deleted, edited, or historical web content from the Wayback Machine, archive.today, Common Crawl, and Memento tools. Use it to compare old versions, enumerate archived URLs, or preserve evidence before a page disappears.

Secrets In Git History mines commit history, refs, and code-host metadata for identities, infrastructure, and leaked credentials. Use it to find API keys, enumerate contributors, or recover secrets deleted from HEAD but still present in history or forks.