From security
OSINT domain intelligence skill — use when asked to research a company domain, find email addresses, subdomains, hosts, or employee names associated with a target domain for sales prospecting or security reconnaissance.
How this skill is triggered — by the user, by Claude, or both
Slash command
/security:harvesterThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Invoke when the user asks to:
Invoke when the user asks to:
Important legal/ethical constraint: Only use against domains you own or have explicit written permission to research. Unauthorised OSINT may be illegal in your jurisdiction.
mcp__plugin_security_theharvester__harvest_domain — primary tool for running theHarvestermcp__plugin_security_theharvester__get_harvest_results — for retrieving results of a previous harvestharvest_domain(domain="target.com", sources="free")
Uses only free/passive sources (default). Safe for initial prospecting.
harvest_domain(domain="target.com", sources="linkedin,hunter,dnsdumpster", limit=50)
free — all free passive sources (recommended starting point)all — all sources including active ones (use with caution)linkedin, hunter, dnsdumpster, crtsh, hackertarget, rapiddns, sublist3r, threatminer, urlscanReturn a structured report with these sections:
Emails found: list or "none found" Subdomains: list (up to 20, note total count) Hosts/IPs: list Employee names: list or "none found"
jira.company.com -> uses Jira)Safe — each harvest runs against a different domain with no shared state. Multiple harvester agents can run simultaneously against different domains.
When invoked by an orchestrator collecting intelligence on multiple domains:
{
"domain": "<target domain>",
"emails": ["<email1>", "<email2>"],
"subdomains": ["<sub1>", "<sub2>"],
"employee_names": ["<name1>"],
"sales_signals": ["<signal1>", "<signal2>"]
}
Guides creation, editing, and verification of skills for AI coding agents using test-driven development with subagent scenarios. Use when authoring or debugging skills.
npx claudepluginhub devkindhq/agency-marketplace --plugin security