investigate-without-getting-made
Protect Your Identity During Online Investigations
Online investigations can expose researchers through accounts, networks, browser fingerprints, timing, and metadata. This skill provides threat modeling, compartmentation, persona controls, and exposure logging.
安装前请停下并请求确认。
请审查安装计划，并在更改文件前获得用户明确同意。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
Review the Skillstore skill "investigate-without-getting-made" from https://skillstore.io/skills/useosint-investigate-without-getting-made.md and its manifest at https://skillstore.io/api/skills/useosint-investigate-without-getting-made/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“investigate-without-getting-made”。 Assess a public company website review from an office network.
预期结果:
Risk: the company can associate the visit with the employer ASN. Use a dedicated browser profile and approved non-corporate egress. Grade the visit anonymous contact.
正在使用“investigate-without-getting-made”。 Prepare to view a subject profile while signed into a personal account.
预期结果:
Do not proceed. The platform may expose the viewer identity or create contact suggestions. Confirm current notification behavior using accounts you control.
正在使用“investigate-without-getting-made”。 Record an accidental attributed visit.
预期结果:
- Stop further collection from the exposed identity.
- Record the identity, timestamp, action, and visible information.
- Notify the case owner and reassess the collection plan.
安全审计
高风险All 18 static findings are false positives caused by Markdown references and descriptive prose. The relative path is a documentation link, not filesystem access. However, detailed persona creation and detection-evasion guidance creates high dual-use risk despite legal warnings and observation-only limits.
已确认安全问题 (1)
风险因素
⚙️ 外部命令 (11)
📁 文件系统访问 (1)
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/useosint-investigate-without-getting-made/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/useosint-investigate-without-getting-made?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/useosint-investigate-without-getting-made?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/useosint-investigate-without-getting-made/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/useosint-investigate-without-getting-made.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
useosint. (2026). investigate-without-getting-made security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/useosint-investigate-without-getting-made/audits/1BibTeX 引用
@techreport{useosint-useosint-investigate-without-getting-made-2026,
author = {useosint},
title = {investigate-without-getting-made security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/useosint-investigate-without-getting-made/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "investigate-without-getting-made security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "useosint"
date-released: "2026-08-03"
url: "https://skillstore.io/skills/useosint-investigate-without-getting-made/audits/1"
identifiers:
- type: other
value: "skillstore:useosint-investigate-without-getting-made:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中你能构建什么
Protect Sensitive Reporting
Plan source research while limiting account, browser, network, and metadata exposure.
Prepare Due Diligence
Assess whether online collection could alert a company, executive, or monitored service.
Control Case Attribution
Document authorization, compartment research environments, and grade exposure after each collection action.
试试这些提示
Create a pre-action OPSEC checklist for researching public websites. Use only passive sources and identify what the subject could observe.
Compare a normal browser, dedicated profile, and dedicated virtual machine for this authorized investigation: [describe case]. Recommend the least complex adequate setup.
Review this collection plan: [plan]. Map account, IP, ASN, browser, TLS, timing, contact-graph, preview, and metadata exposure. Suggest safer passive alternatives.
Build an authorized investigation OPSEC plan for [objective]. Include threat actors, consequences, compartmentation, legal review points, exposure grades, failure responses, and retirement criteria.
最佳实践
- Document authorization, purpose, platform scope, and retirement criteria before creating any research account.
- Prefer archives, registries, and other passive sources before contacting target-controlled infrastructure.
- Log each exposure event immediately and notify the case owner when attribution occurs.
避免
- Do not sign into personal accounts inside a research environment.
- Do not use found credentials, password-reset flows, or false pretexts to access closed systems.
- Do not impersonate real people or use research personas to elicit private information.
常见问题
Does this skill guarantee anonymity?
When is a research persona appropriate?
Should I use Tor for every investigation?
Is a private browser window enough?
What should I do after accidental attribution?
Does this skill provide legal approval?
开发者详情
作者
useosint许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
76c3621ba67d9236f7e0674bbf2a2ecc2696e20c
维护新鲜度
2026/8/3
使用量
0 次下载 · 0 次浏览
文件结构