security-osintlisted

# Security OSINT ## Overview Monitor Twitter/X and Reddit for security-related discussions — CVE mentions, zero-day chatter, breach reports, exploit code sharing, and emerging threats. Provides early warning intelligence often 24-48 hours before formal advisories. ## When to Use Activate when the user asks: - "Find discussions about [CVE-XXXX-XXXXX] on Twitter" - "What's the security community saying about [VULNERABILITY]?" - "Monitor social media for [SOFTWARE] vulnerabilities" - "OSINT research on [THREAT ACTOR/CAMPAIGN]" - "Are there breach reports about [COMPANY] on social media?" - "Threat intelligence from Twitter and Reddit" ## Setup & Authentication Before fetching data, ensure Xpoz access is configured. Follow these checks in order. ### Check 1: Already authenticated? **If you have MCP tools**, try calling any Xpoz tool (e.g., `checkAccessKeyStatus`). If it works → skip to Step 1. **If you have the SDK**, try: ```python from xpoz import XpozClient client = XpozClient() # reads XPOZ_API_KEY env var ``` If this succeeds without error → skip to Step 1. If neither works, you need to authenticate. Choose the path that fits your environment: --- ### Path A: MCP via mcporter (OpenClaw agents) If `mcporter` is available: ```bash mcporter call xpoz.checkAccessKeyStatus ``` If `hasAccessKey: true` → ready. If not: ```bash mcporter config add xpoz https://mcp.xpoz.ai/mcp --auth oauth ``` Then authenticate — generate the OAuth URL and send it to the user: **St