← Back to Skills Marketplace
OSINT Social Analyzer
by
guleguleguru
· GitHub ↗
· v1.0.0
454
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install osint-social
Description
Investigate a username across 1000+ social media platforms and websites using social-analyzer. Use this skill whenever the user wants to look up, investigate...
Usage Guidance
This skill appears to do what it says: run social-analyzer and a small Chinese lookup script to query public profiles. Before installing or running: (1) Prefer creating a Python virtual environment rather than using pip with --break-system-packages; (2) review the social-analyzer package (its PyPI project and source repo) for supply-chain/trust concerns; (3) be aware the tool will make many automated HTTP requests (rate limits, CAPTCHAs, or IP blocks are possible), and ensure you have legal authorization to perform targeted investigations in your jurisdiction; (4) if you are uncomfortable with autonomous agents invoking this skill automatically, restrict invocation or require explicit user permission before running scans.
Capability Analysis
Type: OpenClaw Skill
Name: osint-social
Version: 1.0.0
The skill's stated purpose is legitimate OSINT, and its documentation includes clear ethical disclaimers. However, the `SKILL.md` instructions and `scripts/run_osint.sh` pass user-provided `{USERNAME}` directly into shell commands without explicit sanitization by the skill itself. This creates a shell injection vulnerability (RCE risk) if the OpenClaw agent does not properly sanitize the input before execution. While the `run_osint.sh` script quotes the username, this does not prevent all forms of injection if the agent constructs the initial command string poorly. The `pip3 install --break-system-packages` command also requests elevated installation permissions, which, while sometimes necessary, adds to the risk profile.
Capability Assessment
Purpose & Capability
The skill's name/description (username OSINT across 1000+ platforms) matches its contents: instructions to install and run the social-analyzer Python package, a shell wrapper, and a Chinese-platform Python script. Required binaries (python3, pip3) and included scripts are appropriate for the task.
Instruction Scope
SKILL.md directs the agent to install social-analyzer and run it (plus cn_lookup.py for Chinese platforms). The runtime instructions explicitly perform HTTP requests to public platform APIs and parse JSON; they do not attempt to read unrelated local files, system config, or environment variables. Note: SKILL.md advises the skill be used automatically for any username lookup; that trigger policy is broad but consistent with the described purpose.
Install Mechanism
No packaged install spec is embedded; SKILL.md instructs users to pip3 install social-analyzer (from PyPI). Installing a third‑party package via pip is expected for a Python wrapper but carries the usual supply-chain risk. The documentation recommends the --break-system-packages flag (a system-level install flag) which is unnecessary and riskier than using a virtualenv; otherwise no downloads from unknown personal servers or shorteners are used.
Credentials
The skill requests no environment variables, no credentials, and no config paths. All network calls target public platform endpoints (e.g., Bilibili, Zhihu, Weibo) or rely on the social-analyzer package—this is proportionate to the stated functionality.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It runs on demand and requires no elevated privileges; autonomous invocation is allowed but is the platform default and not combined with other concerning privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install osint-social - After installation, invoke the skill by name or use
/osint-social - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
First release — cross-platform username OSINT with Chinese platform support (Bilibili, Zhihu, Weibo)
- Initial release of the osint-social skill.
- Investigate a username across 1000+ social media platforms with social-analyzer.
- Conversational summary of results, including confidence levels and key profile info.
- Dedicated workflow and script for Chinese platforms (Bilibili, Zhihu, Weibo).
- Clear guidance on setup, standard and deep lookups, and platform-specific investigations.
- Privacy & ethics reminder included in every investigation summary.
Metadata
Frequently Asked Questions
What is OSINT Social Analyzer?
Investigate a username across 1000+ social media platforms and websites using social-analyzer. Use this skill whenever the user wants to look up, investigate... It is an AI Agent Skill for Claude Code / OpenClaw, with 454 downloads so far.
How do I install OSINT Social Analyzer?
Run "/install osint-social" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OSINT Social Analyzer free?
Yes, OSINT Social Analyzer is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OSINT Social Analyzer support?
OSINT Social Analyzer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OSINT Social Analyzer?
It is built and maintained by guleguleguru (@guleguleguru); the current version is v1.0.0.
More Skills