Stats
Actions
Tags
Produces categorized OSINT tool catalogs for journalist investigations — geolocation, verification, account analysis, satellite imagery, and more — with practical guidance on use and limitations.
How this skill is triggered — by the user, by Claude, or both
Slash command
/autopunk-media-skills:osint-tool-catalogThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Produces a categorised catalog of open-source intelligence tools relevant to a journalist's investigation, with practical guidance on what each tool does, when to use it, and what its limitations are.
Produces a categorised catalog of open-source intelligence tools relevant to a journalist's investigation, with practical guidance on what each tool does, when to use it, and what its limitations are.
Required: The type of investigation or the category of tools you need (e.g., "geolocation tools," "corporate ownership research," "full catalog for a newsroom reference sheet") Optional: The specific platform or data type you are working with (e.g., "Telegram account analysis," "ship tracking," "Chinese corporate records"); your skill level (beginner, intermediate, advanced); whether you need free tools only or can use paid services
Identifies the investigation category or categories relevant to the request. If the user asks for a full catalog, covers all categories. If they ask for a specific domain, focuses there.
For each category, lists the most reliable and widely used tools. Provides: tool name, URL (when it is a web tool or has a stable homepage), what it does in one sentence, free vs. paid status, and a practical note on what it is good at and where it falls short.
Groups tools by investigation domain, not alphabetically. Domains: geolocation and mapping, account and identity analysis, satellite and aerial imagery, facial recognition and biometrics, archiving and preservation, transport tracking (maritime, aviation, rail), corporate and financial research, document and metadata analysis, network and infrastructure analysis, social media monitoring. Adds domains as needed if the investigation warrants it.
Notes legal and ethical boundaries for each category where relevant. Some tools (facial recognition, phone-number lookup) raise privacy and legal issues depending on jurisdiction. The skill flags these without making legal judgments — it says "check your jurisdiction's rules on this" and names the type of law that applies.
Closes with a short guidance note on tool hygiene: using a dedicated browser profile or VM for OSINT work, not logging into personal accounts while researching, understanding that some tools log your queries, and documenting your tool use for editorial transparency.
Categorised reference list. Each category gets a heading. Each tool entry is 2–4 lines: name, URL, one-sentence description, cost, practical note. Closes with an operational-security section. Total length depends on scope — a single-category request produces 300–500 words; a full catalog runs 1500–2500 words. No marketing language. No rankings. Tools are listed by practical utility, not popularity.
I need a full OSINT tool catalog for our investigative unit. We cover corporate corruption, environmental crime, and political disinformation across Europe. Free tools preferred, but flag paid tools that are worth it. Intermediate skill level.
OSINT tool catalog — investigative unit reference
Google Earth Pro — desktop.google.com/earth — Historical satellite imagery with a time slider. Free. The single most useful tool for verifying when a building was constructed, when land was cleared, or when a facility changed. Resolution varies by region.
SunCalc — suncalc.org — Calculates sun position, shadow angles, and golden-hour timing for any location and date. Free. Use it to verify the time a photograph was taken by matching shadow angles to the claimed time and location. Requires a clear shadow in the image.
Sentinel Hub EO Browser — apps.sentinel-hub.com/eo-browser — Access to Copernicus Sentinel satellite imagery (Sentinel-2 for optical, Sentinel-1 for radar). Free for individual use. Updated every 5 days. Resolution is 10m per pixel — useful for land-use change, deforestation, or large-scale environmental damage but not for identifying individual vehicles or people.
Mapillary — mapillary.com — Crowdsourced street-level imagery (alternative to Google Street View, with different coverage and dates). Free. Useful when Google's imagery is outdated or absent. Coverage is uneven outside Western Europe and North America.
what3words / Plus Codes — For receiving or communicating precise locations from sources who cannot share coordinates. Free. Not an analysis tool; a communication aid.
Namechk — namechk.com — Checks whether a username is registered across dozens of platforms. Free. Starting point for building an account footprint across services. Does not verify that the same person controls all accounts with the same username.
WhatsMyName — whatsmyname.app — Similar to Namechk but open-source and maintained by the OSINT community. Free. More frequently updated than commercial alternatives.
Epieos — epieos.com — Searches for accounts linked to an email address or phone number across platforms. Free tier with limits, paid for full results. Check your jurisdiction's data-protection rules before using phone-number lookups on EU residents — this type of query can fall under GDPR depending on your purpose and relationship to the subject.
Wayback Machine CDX API — web.archive.org/cdx — Retrieve historical snapshots of a web page or social media profile. Free. Essential for documenting what a page said before it was edited or deleted. See the web-archiving skill for detailed guidance.
Google Earth Pro — (see Geolocation section) — Also the primary free satellite imagery tool.
Maxar SecureWatch / EarthExplorer — Paid (Maxar) / Free (USGS EarthExplorer for Landsat) — High-resolution commercial satellite imagery for when Sentinel's 10m resolution is not enough. Maxar provides sub-metre resolution but at significant cost. EarthExplorer gives free Landsat imagery at 30m resolution, useful for long-term environmental change.
Planet Explorer — planet.com — Daily imaging of the entire Earth at 3–5m resolution. Paid, but Planet offers free access to journalists through its media programme (apply via their website). Unmatched for monitoring day-by-day changes at a specific site.
MarineTraffic — marinetraffic.com — Live and historical vessel tracking via AIS data. Free tier shows current positions; paid tier gives historical routes and port calls. Standard tool for investigating sanctions evasion, illegal fishing, and maritime transport of goods. Vessels can disable their AIS transponders to avoid tracking — gaps in the track record are themselves significant.
FlightRadar24 — flightradar24.com — Live and historical flight tracking. Free tier shows current flights; paid tiers give historical data and owner information. Useful for tracking private jets linked to specific individuals or companies. Some military and government flights are filtered from public view.
OpenRailwayMap — openrailwaymap.org — Maps railway infrastructure worldwide. Free. Niche but useful for investigations involving rail freight routes, especially cross-border transport.
OpenCorporates — opencorporates.com — Aggregates company registry data from jurisdictions worldwide. Free basic search; paid for bulk access. First stop for identifying company officers, registered addresses, and jurisdictional registration. Coverage varies by country.
North Data — northdata.com — European company data, including ownership chains and officer networks. Free tier with limits; paid for full graphs. Particularly strong for Germany, Austria, Switzerland, and the Nordics.
Aleph (OCCRP) — aleph.occrp.org — Cross-references leaked databases, company registries, court records, and sanctions lists. Free for journalists (register for access). The strongest free tool for following money across borders. Data is strong for Eastern Europe, the Balkans, and Central Asia.
EU Transparency Register — ec.europa.eu/transparencyregister — Lists organisations and individuals engaged in lobbying EU institutions. Free. Useful for identifying who is lobbying on a specific directive and how much they report spending. Registration is semi-voluntary, so absence does not mean absence of lobbying activity.
Beneficial Ownership Registers — Varies by country (e.g., Companies House for the UK, Handelsregister for Germany). Coverage is expanding under EU Anti-Money Laundering Directives, but effective access varies by jurisdiction and some countries have restricted public access citing privacy concerns.
ExifTool — exiftool.org — Extracts and edits metadata from images, videos, PDFs, and office documents. Free, open-source, command-line. The standard tool for metadata inspection. See the source-verification skill for what to look for.
FOCA — github.com/ElevenPaths/FOCA — Extracts metadata from documents (PDFs, DOCs, spreadsheets) found on a target website. Free, open-source. Useful for identifying authors, software versions, and internal network paths embedded in published documents.
PDF Table Extractor tools — Tabula (tabula.technology) for structured tables in PDFs; Camelot (Python library) for more complex layouts. Both free. Essential for turning government reports and financial filings into workable data.
Wayback Machine — web.archive.org — Archive and retrieve web pages. Free. The default archiving tool. See the web-archiving skill for multi-archive strategy.
Archive.today — archive.today — Independent web archive. Free. Better than Wayback Machine for capturing JavaScript-rendered pages and pages behind soft paywalls. Use both for redundancy.
Hunchly — hunch.ly — Browser extension that automatically archives every page you visit during a research session, with timestamps and hash verification. Paid ($130/year). Designed for OSINT investigators. Creates a court-admissible evidence chain if needed.
Shodan — shodan.io — Searches for internet-connected devices, servers, and infrastructure. Free basic search; paid for full results. Useful for identifying the hosting infrastructure behind a website, exposed databases, or industrial control systems. Not a hacking tool — it indexes publicly visible information.
BuiltWith — builtwith.com — Identifies the technology stack behind a website. Free basic lookup. Useful for linking websites that share the same analytics tracking codes, advertising IDs, or hosting infrastructure — a method for connecting apparently unrelated websites to the same operator.
DNSViz / SecurityTrails — dnsviz.net / securitytrails.com — DNS record analysis and historical DNS lookups. Free tiers available. Useful for tracing who owns a domain, where it was hosted previously, and whether it shares infrastructure with other domains.
Keep OSINT research separate from your personal online identity. Practical steps:
npx claudepluginhub ur-grue/autopunk-media-skills --plugin autopunk-media-skillsRoutes OSINT investigation queries to appropriate tools and techniques across 150+ tools, with methodology guides and OSINT Navigator integration. Works offline with any LLM.
Recommends 150+ OSINT tools and methodologies for investigations like reverse image search, geolocation, domain WHOIS, social media intel, and threat analysis. Routes to specialized skills.
Executes offensive OSINT methodology for red team recon, bug bounty, and target investigation. Covers domain recon, email harvesting, social profiling, code leaks, Shodan/Censys, breach data, crypto tracing, and geospatial intelligence.