abuseipdb-api
FreeAbuseIPDB API reference. IP reputation and abuse report lookups.
The English summary is being prepared. Showing the original description.
Liberty91LTD/cti-skills27Updated Sep 30, 2026
FreePublished on GitHub
urlscan-api
URLScan.io API reference. URL submission, scanning, and result retrieval.
The English summary is being prepared. Showing the original description.
See how to installFiles included (1)
- SKILL.md2.0 KB
SKILL.md (original)
Review the instructions the agent will receive before you install.
URLScan.io API
Base URL
https://urlscan.io/api/v1
Authentication
Header: API-Key: $URLSCAN_API_KEY
Rate Limits
- Free: 100 scans/day, 100 searches/day
- Paid: Higher limits based on plan
Key Endpoints
Submit URL for scanning
curl -s -X POST "https://urlscan.io/api/v1/scan/" \
-H "API-Key: $URLSCAN_API_KEY" \
-H "Content-Type: application/json" \
-d '{"url": "https://example.com", "visibility": "unlisted"}'
Response: {"uuid": "...", "api": "https://urlscan.io/api/v1/result/UUID/"}
Important: Scan is async. Wait ~30 seconds before retrieving results. Poll the result URL until status is not 404.
Retrieve scan results
curl -s "https://urlscan.io/api/v1/result/{uuid}/" \
-H "API-Key: $URLSCAN_API_KEY"
Useful response fields:
verdicts.overall— malicious/benign scorepage.url— final URL after redirectspage.ip— IP address resolvedpage.country— hosting countrypage.server— web serverlists.ips— all IPs contactedlists.domains— all domains contactedlists.urls— all URLs loadedstats.tlsPercentage— TLS usagetask.screenshotURL— screenshot of page
Search existing scans
curl -s "https://urlscan.io/api/v1/search/?q=domain:example.com" \
-H "API-Key: $URLSCAN_API_KEY"
Search operators: domain:, ip:, server:, filename:, hash:, page.url:
Scan Flow
- Submit URL → get UUID
- Wait 30 seconds
- Poll result endpoint (retry on 404, max 5 attempts with 10s delay)
- Extract and return key findings
Response Summary Format
url: <scanned URL>
final_url: <after redirects>
verdict: malicious|suspicious|benign|unknown
ip: <resolved IP>
country: <hosting country>
technologies: [<detected technologies>]
domains_contacted: [<list>]
ips_contacted: [<list>]
screenshot: <URL>
Reviews
No reviews yet. Tell others what you thought.
Comments
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
More skills from this repository
ach
FreeAnalysis of Competing Hypotheses — structured technique for evaluating multiple explanations against evidence. Use when facing ambiguous attribution or multiple plausible scenarios. Prefers graded evidence items from /quality-of-information-check and runs that skill first when handed raw URLs or text. Runs on ungraded evidence when asked, labelled as such, unweighted, and capped at Moderate confidence.
The English summary is being prepared. Showing the original description.
Liberty91LTD/cti-skills27Updated Sep 30, 2026
Use when documenting a named campaign across time and victims, the user asks to start or update a campaign record, or another skill identified a multi-incident cluster that warrants formal tracking. Provides the template (timeline, attribution, victimology, attack chain, Diamond Model mapping, IOC clusters) and the lifecycle from active to historical.
The English summary is being prepared. Showing the original description.
Liberty91LTD/cti-skills27Updated Sep 30, 2026
Use when the user asks about carding, BIN attacks, payment-card breach markets, fullz/CVV2 trade, autoshops (BidenCash, Brian's Club, Russianmarket, B1ack's Stash), or financial-fraud TTPs. Self-updating knowledge cell.
The English summary is being prepared. Showing the original description.
Liberty91LTD/cti-skills27Updated Sep 30, 2026
censys-api
FreeCensys API v2 reference. Host reconnaissance and certificate data.
The English summary is being prepared. Showing the original description.
Liberty91LTD/cti-skills27Updated Sep 30, 2026
Use when the user asks about Chinese state-sponsored cyber operations or specific PRC-aligned actors (APT41, Volt Typhoon, Mustang Panda, APT10, APT31, Salt Typhoon, etc.), MSS/PLA-attributed campaigns, or PRC sector targeting. Self-updating knowledge cell.
The English summary is being prepared. Showing the original description.
Liberty91LTD/cti-skills27Updated Sep 30, 2026