OSINT toolkits · Rank #8

B

cti-expert

Grade B: derived only from the two verdicts below. How grades work

CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

Active1 major behindFree

Why this verdict

How we check →
  • 143 commits by 4 contributors in the last 90 days (14 in the last 30). receipt ↗
  • NumPy 1 declared; latest is 2 (1 major behind). receipt ↗
  • On current major: Pydantic. receipt ↗

Snapshot: commit a7ca9b7 on main, checked 2026-10-19 07:52 UTC. Receipts link to files at this exact commit.

Check before you commit
  • No license detected: check terms before commercial use.

Dependency freshness

PackageDeclaredLatestStatus
NumPy numpy1.24.02.5.41 major behind
Pydantic pydantic2.0.02.14.1Current

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

Database / ORM
PostgreSQL (psycopg)
API layer
Pydantic

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

  • Data
    Persistent knowledge basea persistent knowledge base, versioned cases, cross-case correlation, and calibrated assessment
  • Deploy
    Bundled installerthe bundled installer (`scripts/install.{sh,ps1}`) provisions the deep layer automatically
  • Other
    Multi-vector reconnaissanceMulti-vector reconnaissance on any target type — person, domain, organization, username, email, IP, WiFi
  • Other
    Structured report bundlethe base bundle (Markdown + JSON + CSV + IOC bundle) always saves
  • Other
    Presentation report formatsyou pick a presentation report: PDF, DOCX, HTML, or all
  • Other
    Keyless core techniquesEvery core technique runs with zero API keys
  • Other
    Auto-detected API keysAdd any free or paid keys to `.env` (or run `/apikeys set `) and the skill auto-detects them
  • Other
    Automated finding validationwith automated finding validation, exposure scoring, and structured intelligence delivery
  • Other
    Cross-type auto-pivot loopEvery selector type is a frontier node; metered spend stays behind one digest-bound approval
  • Other
    WHOIS history erasthe house report renders a **Registrant eras** table
  • Other
    urlscan Pro lifecycleurlscan **Pro** supplies the hostname lifecycle index
  • Other
    Sandbox detonationsubmits each complete file through the private-by-default sandbox client

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote; 2 unverifiable items were discarded. A README claim is the maker's description, not something we tested.

Watch cti-expert

Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.

You'll get a confirmation email first. One click to unsubscribe. Watch as many kits as you like.

RSS feed for cti-expert · all changes

History

Oct 1, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.

Show as a table
DateMaintenanceDependenciesCommits (90d)
Oct 19, 2026Active1 major behind143
Oct 12, 2026Active1 major behind142
Oct 1, 2026Active1 major behind142

Sources

Every claim on this page comes from these public records, checked . Open them to verify.

Maintainer? Add the badge

It updates automatically every time we refresh the evidence. Clicking it opens this page.

kitproof badge for cti-expert
[![kitproof](https://kitproof.dev/badge/cti-expert.svg)](https://kitproof.dev/kits/cti-expert/)