Security OSINT
Twitter/Reddit CVE and breach chatter monitoring, but real use needs a paid Xpoz account
Test report
- Verdict
- Works with setup
- Score
- Tested
- Jul 16, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · 458d66b
Report template and query-building logic are genuinely more rigorous than an ad-hoc search, but every path (MCP/SDK/CLI/API) is gated behind a Xpoz account and API key, so it can't produce a real result out of the box.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 5/5
- Triggers reliably 5/5
- Output vs. baseline 7/10
- Docs & honesty 4/5
What Security OSINT does
Builds targeted Twitter/Reddit search queries for CVE IDs, threat actors, and breach mentions, then turns the results into a structured threat-intel report (timeline, severity, key voices, recommended actions). Triggers on CVE lookups, vulnerability/OSINT monitoring, and breach-mention requests, but every data path (MCP, SDK, CLI, direct API) requires a Xpoz account/API key — a free 5-day trial token exists but still requires hitting the vendor's signup endpoint.
How to install Security OSINT
git clone https://github.com/XPOZpublic/xpoz-agent-skills
mkdir -p ~/.claude/skills
cp -r xpoz-agent-skills/skills/security-osint ~/.claude/skills/security-osint
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Security OSINT
-
/security-osintTwitter/Reddit CVE and breach chatter monitoring, but real use needs a paid Xpoz account
It also activates on plain-language prompts like these:
-
What's the security community saying about CVE-2026-1234 on Twitter? -
Monitor Reddit for chatter about this new data breach -
Build me a threat-intel report on recent ransomware group activity
Frequently asked questions
- Is the Security OSINT skill free?
- Yes. The skill itself is free from XPOZpublic/xpoz-agent-skills. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Security OSINT work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 16, 2026. Verdict: Works with setup. Report template and query-building logic are genuinely more rigorous than an ad-hoc search, but every path (MCP/SDK/CLI/API) is gated behind a Xpoz account and API key, so it can't produce a real result out of the box.
- What is the Security OSINT SkillProof Score?
- 8.4/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 4/5.
- How do I install Security OSINT?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Security OSINT with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.