OSINT Daily Brief

Generate a daily OSINT intelligence brief on any target — domain, company, IP, person, or keyword — using Tavily web search, WHOIS, DNS recon, and Shodan. De...

This appears to be a legitimate OSINT recipe, but metadata and instructions disagree about required credentials. Before installing: (1) insist the publisher update the registry metadata to list TAVILY_API_KEY (and optionally SHODAN_API_KEY) so automated permission checks are accurate; (2) only provide API keys you trust and that are scoped/minimized; (3) verify Tavily and Shodan endpoints and their privacy/retention policies (collected data will be sent to them); (4) be cautious about scheduling automated runs that send reports to external destinations (Telegram example uses an undeclared token); and (5) if you want extra safety, run first in a sandboxed environment or request the author add explicit configuration options and a preview mode that does not exfiltrate results. If the publisher cannot clarify the missing env var declarations and the Telegram delivery details, treat the skill as untrusted.

Type: OpenClaw Skill Name: osint-daily-brief Version: 1.0.0 The skill is a legitimate OSINT tool designed to generate intelligence reports using Tavily, Shodan, and system utilities like `dig` and `whois`. The Python snippets in SKILL.md use safe subprocess.run calls (passing arguments as a list) to prevent shell injection, and the data flow is restricted to the stated API providers. No indicators of data exfiltration, obfuscation, or malicious intent were identified.