# Intelligence Summary (INTSUM) Report Template

When the user issues `/intel-report`, generate a markdown file following this exact structure. Populate sections from conversation findings. Mark sections as "No data collected" if empty.

---

```markdown
# OSINT Intelligence Summary (INTSUM)

**Classification:** OPEN SOURCE — PUBLIC DATA ONLY
**Report Date:** [YYYY-MM-DD]
**Analyst:** Claude (AI-Assisted OSINT)
**Subject:** [Primary target of investigation]
**Report ID:** INTSUM-[YYYYMMDD]-[short-subject-slug]

---

## 1. Executive Summary

[2–4 sentence overview of the investigation scope, key findings, and overall assessment. This should be readable by someone who reads nothing else.]

---

## 2. Subject Profile

| Field | Value | Confidence |
|-------|-------|------------|
| **Name / Identifier** | [value] | [🟢/🟡/🔴] |
| **Type** | [person / organization / domain / etc.] | — |
| **Known Aliases** | [usernames, alternate names] | [confidence per alias] |
| **Location** | [city, country if known] | [🟢/🟡/🔴] |
| **Affiliation** | [employer, org] | [🟢/🟡/🔴] |
| **Online Presence** | [list of confirmed platforms WITH FULL URLs] | [🟢/🟡/🔴] |
| **First Seen Online** | [earliest dated reference] | [🟢/🟡/🔴] |

---

## 3. Key Findings

### Finding 1: [Descriptive Title]
- **Confidence:** [🟢 HIGH / 🟡 MEDIUM / 🔴 LOW]
- **Summary:** [What was found]
- **Evidence:** [Specific URLs, search queries, or data points]
- **Analyst Note:** [Interpretation or significance]

### Finding 2: [Descriptive Title]
[repeat structure]

### Finding N: [Descriptive Title]
[repeat structure]

---

## 4. Entity Relationship Map

[Text-based representation of discovered connections between entities]

```
[Primary Subject]
├── email: subject@example.com
│   └── linked to: GitHub account "username"
│       └── real name visible: "John Doe"
├── username: "cooluser99"
│   ├── Twitter/X: active, 2.3k followers
│   ├── Reddit: active in r/technology, r/cybersecurity
│   └── GitHub: 47 repos, employed at TechCorp (bio)
├── domain: example.com
│   ├── registered: 2019-03-15
│   ├── registrant: privacy-protected
│   └── hosted at: 203.0.113.50 (AWS us-east-1)
└── organization: TechCorp Inc.
    ├── founded: 2017
    └── CEO: Jane Smith
```

---

## 5. Timeline

| Date | Event | Source | Confidence |
|------|-------|--------|------------|
| [YYYY-MM-DD] | [Event description] | [URL or source] | [🟢/🟡/🔴] |
| [YYYY-MM-DD] | [Event description] | [URL or source] | [🟢/🟡/🔴] |

---

## 6. Source List

**CRITICAL: Every source MUST include its full URL. Text-only references (e.g., "LinkedIn John Doe" without a URL) are PROHIBITED. See `output/reports/citation-guide.md` for the mandatory URL policy.**

All sources consulted during this investigation:

| # | Source | URL (MANDATORY) | Date Accessed | Notes |
|---|--------|-----------------|---------------|-------|
| 1 | [Source name] | [Full URL — e.g., https://linkedin.com/in/john-doe] | [date] | [relevance] |
| 2 | [Source name] | [Full URL — e.g., https://github.com/username] | [date] | [relevance] |

---

## 7. Intelligence Gaps

[What we wanted to find but couldn't. These represent areas for further investigation.]

- [ ] [Gap description — e.g., "Unable to confirm employment dates at CompanyX"]
- [ ] [Gap description]
- [ ] [Gap description]

---

## 8. Recommended Next Steps

1. [Specific actionable next step]
2. [Specific actionable next step]
3. [Specific actionable next step]

---

## 9. Analyst Caveats & Methodology Notes

- This report is based exclusively on publicly available information gathered via web search.
- Correlation between accounts is inferred from shared identifiers (usernames, emails, bios) and is not guaranteed to represent the same individual.
- Confidence ratings reflect the analyst's assessment at time of writing and may change with additional information.
- No private data was accessed. No accounts were created or logged into. No social engineering was employed.
- [Any investigation-specific caveats]

---

*Generated by Free OSINT Expert Skill v1.0 — AI-Assisted Open Source Intelligence*
```
