The Complete Production SOP: How to Deploy and Run Sublist3r OSINT Subdomain Enumeration Tool in Autonomous AI Agents

---
name: "sublist3r-subdomain-enumerator"
description: "Discover public subdomains across internet search engines and SSL certificate logs."
metadata:
  author: "Ahmed Aboul-Ela"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "enumerate subdomains sublist3r"
  - "find subdomains with osint"
  - "discover external attack surface"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# Sublist3r OSINT Subdomain Enumeration Tool

Gathers public subdomains using Sublist3r: querying search engines and crt.sh logs.

## Execution SOP & Rules
1. Run sublist3r -d <target-domain> -o subdomains.txt to collect discovered hostnames.
2. Enumerate certificate transparency logs to uncover recently issued subdomain certificates.
3. Verify whether discovered subdomains resolve to active IP addresses or dangling DNS records.
4. Decommission or firewall forgotten test and staging environments.

#!/usr/bin/env bash
set -euo pipefail

if ! command -v sublist3r &> /dev/null && ! python3 -m sublist3r -h &> /dev/null; then
  echo "Error: Sublist3r is not accessible in the current Python environment."
  exit 1
fi

echo "Sublist3r environment check passed."

Please discover external attack surface for target domain 'staging.example.com' using passive OSINT. Follow the sublist3r-subdomain-enumerator skill rules and write all unique records to subdomains.txt.

#!/usr/bin/env bash
set -euo pipefail

OUTPUT_FILE="subdomains.txt"

if [ ! -f "$OUTPUT_FILE" ]; then
  echo "Verification failed: $OUTPUT_FILE does not exist."
  exit 1
fi

COUNT=$(wc -l < "$OUTPUT_FILE" | tr -d ' ')
if [ "$COUNT" -eq 0 ]; then
  echo "Verification warning: No subdomains discovered."
  exit 0
fi

echo "Successfully discovered and verified $COUNT unique subdomains."