mirror of
https://github.com/UseOSINT/Skills.git
synced 2026-09-14 20:16:57 +08:00
36 lines
1.8 KiB
Markdown
36 lines
1.8 KiB
Markdown
|
|
# Ethics, Legality & Authorized Scope
|
||
|
|
|
||
|
|
OSINT is powerful. These skills are built for **lawful, authorized, defensive
|
||
|
|
work**: threat intelligence, fraud investigation, due diligence, journalism,
|
||
|
|
missing-persons research, penetration-test reconnaissance, and personal digital
|
||
|
|
self-defense.
|
||
|
|
|
||
|
|
Every workflow skill opens with an **authorized scope** gate. Honor it.
|
||
|
|
|
||
|
|
## The rules
|
||
|
|
|
||
|
|
1. **Passive by default.** Prefer observation over interaction. Never log in to,
|
||
|
|
probe, exploit, or send traffic to a target's private systems without written
|
||
|
|
authorization. Reading a public profile is OSINT; brute-forcing a login is a
|
||
|
|
crime.
|
||
|
|
2. **Stay legal in your jurisdiction.** Computer-misuse, wiretap, stalking,
|
||
|
|
harassment, and data-protection laws (GDPR, CCPA, etc.) all apply to
|
||
|
|
research. When unsure, stop and get counsel.
|
||
|
|
3. **No harassment, doxxing, or stalking.** Do not use these skills to locate,
|
||
|
|
intimidate, or expose private individuals for harm. Aggregating someone's
|
||
|
|
personal data to threaten them is abuse, full stop.
|
||
|
|
4. **Minimize and protect data.** Collect only what the objective requires.
|
||
|
|
Store case data encrypted, share on need-to-know, and delete when done.
|
||
|
|
5. **Corroborate before you conclude.** A single selector match is a lead, not a
|
||
|
|
fact. Attribution requires multiple independent, corroborating sources.
|
||
|
|
6. **Respect terms of service and rate limits.** Automated scraping can be
|
||
|
|
illegal or get you banned. Use official APIs where they exist.
|
||
|
|
|
||
|
|
## Not for
|
||
|
|
|
||
|
|
Stalking, harassment, doxxing, unauthorized access, or any activity prohibited
|
||
|
|
by law. If your objective is to harm a person, these skills are not for you.
|
||
|
|
|
||
|
|
By using this repository you accept full responsibility for how you apply it.
|
||
|
|
The authors provide it "as is" with no warranty (see [LICENSE](LICENSE)).
|