Provides open source intelligence techniques for CTF challenges. Use when gathering information from public sources, social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings, or identifying unknown data like hashes and coordinates.
- Stars
- 3,615
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 2 findings to review, highest severity high.
- Highest severity
- high
- Findings
- 2
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 2 findings to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (2)
high · 2
- high
Tells Claude to install unpinned packages (shodan, Pillow)
SKILL.md:20 · skill_risk:S2
- high
Tells Claude to install unpinned packages (ssh-audit)
web-and-dns.md:203 · skill_risk:S2
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More data & analytics skills and plugins
fintel-datahimself65Query Fintel (fintel.io) institutional market data through its REST API or official MCP server. Use this skill whenever the user mentions… No issuesData & analyticsFinance3.5k
hormuz-straithimself65Check the live status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard: open, restricted, or closed status, tanker… No issuesData & analyticsFinance3.5k
hyperliquid-readerhimself65Read Hyperliquid (app.hyperliquid.xyz) perp and spot market data through opencli and Hyperliquid's public info API: mark, oracle, and mid… Review findingsData & analyticsFinance3.5k
tradingview-mcphimself65Query TradingView market data through the bundled tradingview MCP server without a desktop app or login. Use whenever the user wants a… No issuesData & analyticsFinance3.5k