---
name: "theharvester-osint-email-gatherer"
description: "Gather employee email addresses, employee names, and subdomains from public sources."
metadata:
  author: "Christian Martorella"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "gather emails with theharvester"
  - "harvest public domain information"
  - "check exposed employee emails"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# theHarvester Public Domain Email & Subdomain Harvester

Gathers public intelligence with theHarvester: harvesting emails, names, subdomains, IPs, and URLs from search engines, PGP key servers, LinkedIn, and Shodan API.

## When to Invoke
Invoke this skill whenever you need to:
- gather emails with theharvester
- harvest public domain information
- check exposed employee emails

## Execution SOP & Rules
1. Execute theHarvester -d example.com -b all -l 500 -f report.html.
2. Review discovered email addresses and implement DMARC/SPF protections to prevent domain spoofing.
3. Train employees with exposed contact addresses on identifying targeted phishing attempts.
4. Ensure privacy protections on domain WHOIS registrations to limit personal contact leaks.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.