Home / Skills / org-attack-surface

org-attack-surface

Org-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint — corporate family -> owned domains -> owned netblocks/ASN -> live assets — with attribution discipline, not just DNS breadth. The org-first attribution pyramid (legal entity -> LEI/registration -> corporate family -> owned domains -> owned netblocks/ASN -> live assets). Corporate-identity resolution via the GLEIF LEI API (legal name -> LEI, exact-LEI direct-children expansion, downward-only depth-capped BFS, NEVER a name re-resolution), SEC-EDGAR full-text search + Exhibit-21 subsi

ScannedSkillSource: GitHub

2,831 stars +27 this week Updated 26d ago License MIT Context ≈155 tokens always loaded

74popular

Why this score

Stars

17/35

Usage (forks)

7/15

Upkeep

25/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 2,831 stars are split between them (about 283 each) for scoring.

Popularity score: 74/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit 114e0bb90e47, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This oneorg-attack-surface elementalsouls/Claude-OSINT · Skill	74	★ 2.8k	≈155 always	26d ago
easm-review-attack-surface zscaler/zscaler-mcp-server · Skill Both about attack and surface	58	★ 50	≈100 always	23d ago
shiro-attack-cli SummerSec/ShiroAttack2 · Skill Both about attack	71	★ 2.6k	≈61 always	5mo ago
attack-cache-poison CyberStrikeus/CyberStrike · Skill Both about attack	71	★ 3.2k	≈29 always	21d ago
credential-attack awarexone/Agentic-Bug-Hunter · Skill Same job: contracts & policies	77	★ 5.4k	≈118 always	26d ago
attack-planner 0xSteph/pentest-ai-agents · Subagent Both about attack	64	★ 2.4k	≈21 in chat	29d ago

Install

mkdir -p .claude/skills/org-attack-surface

curl -sL https://codeload.github.com/elementalsouls/Claude-OSINT/tar.gz/114e0bb90e47f01e64dc72d1f00b4221e0dde875 | tar -xz -C .claude/skills/org-attack-surface --strip-components=3 "Claude-OSINT-114e0bb90e47f01e64dc72d1f00b4221e0dde875/skills/org-attack-surface"

To remove it later:

rm -rf .claude/skills/org-attack-surface

npx skills add elementalsouls/Claude-OSINT --skill org-attack-surface

Pinned to commit 114e0bb90e47 as listed by GitHub.

Context cost: ≈155 tokens loaded every session (name and description), plus ≈16k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Used for

Legal › Contracts & policies

Facts

Repo: elementalsouls/Claude-OSINT
Stars: 2,831
Forks: 520
Last push: 2026-10-09 (26d ago)
License: MIT
Owner: elementalsouls · since 2019
Language: Python
Works with: Claude Code, Skills CLI