pattern-of-life-from-socials

pattern-of-life-from-socials is an OSINT tradecraft skill for deep-diving a subject's social media presence across Instagram, Facebook, X/Twitter, TikTok, LinkedIn, Reddit, Telegram, and Discord, turning scattered public posts into a model of where someone is, when, and with whom. It works four analytic layers — account metadata, network, content, and temporal behaviour — deliberately emphasizing the metadata and posting-time signals that a subject cannot curate.

The skill covers deriving account creation dates and durable numeric IDs (including snowflake timestamp decoding), recovering handle history, mapping networks by early followers, mutual-follow clusters, tag direction, and reply latency, reading accidental content in photos (reflections, screens, documents, vehicles, repeated backgrounds), extracting EXIF and geolocating imagery via sibling skills, and plotting post timestamps to infer a sleep window, timezone offset, and work pattern. It carries unusually heavy ethical scaffolding: the skill opens by naming itself the most abusable technique in the repo, is marked `disable-model-invocation: true`, and requires a written authorized scope (subject, objective, in/out-of-bounds, posture, jurisdiction, stop condition) before any profile is opened, with explicit stop conditions when the trail reaches an uninvolved third party.

It is aimed at authorized professionals doing threat assessment and executive protection, insider-threat investigation, pre-litigation research, and personal exposure audits. Despite the strong guardrails, the underlying capability is personal surveillance, deanonymization, and location/routine inference on individuals — genuinely high-impact, privacy-invasive tradecraft that the source itself acknowledges can produce a stalking dossier. That capability profile places its security rating well below benign skills regardless of the intended framing.