Skip to content
Browse documentation

Skill guides · 4 min read

Using the Skill library

Choose a prepared investigation, enter its required details, review the request, and run it in your case.

Choose the investigation you need

Skills are prepared investigations with fields for the subject and any necessary context. Each card explains its purpose and expected result. Use the individual guides to understand the required inputs, evidence to review, and limits of a conclusion before starting.

Search the Skill library by subject, tool, or what you are trying to establish. Narrow the results with the category filter. If no Skills match, broaden your search or reset the category filter.

Understand availability

Select Available on my plan to show Skills your current plan can use. Otherwise, locked Skills remain visible with a Requires plan label and a disabled button. Compare plans opens the subscription screen.

Most Skills are available on Pro and Agency, including Public-source research, BLUF situation brief, and Public profile discovery. Breach pattern analysis, Cross-entity correlation, IP threat signals, and IP abuse history require Agency. Each guide states its supported plans. Running an investigation remains subject to your account’s access and credit availability.

Fill, review, and send

  1. Open the case you intend to work in, then open Skill library.
  2. Find the Skill and select Use template. Read its description and expected evidence.
  3. Fill every required field. Fields marked (optional) may be left blank. Choose a listed value where the form provides a dropdown.
  4. Check the Preview and the stated limitations. The button reads Complete required fields until the required inputs are accepted.
  5. Select Insert into chat. This takes the prepared request to the investigation composer for review; it does not send it.
  6. Check the intended case and send the unchanged request to run the selected Skill.

Use precise inputs

  • Use the exact identifier requested: a domain, IP address, SEC CIK, wallet address, or saved subject ID is different from a general name.
  • For BLUF and news timelines, use a relative quantity such as three months or the last two years. Their time-window field does not accept arbitrary date ranges.
  • For risk-screening Skills, add known identity details when available. Supply optional Identifier type and Identifier value together, or leave both blank.
  • Examples in these guides illustrate the input format. Replace example names, reserved domains, addresses, and IDs with the subject you intend to investigate; examples do not promise a successful lookup.

Read evidence before drawing a conclusion

Check the cited source, date, subject match, and limitations behind each material finding. A search reference, possible identity match, reported allegation, and confirmed association are different kinds of result. Keep contradictions and missing coverage visible.

A qualified no-result only describes the sources and scope covered by that investigation. It does not prove public absence or clearance. Skills that provide snapshots do not create recurring searches or alerts. Risk change review compares retained assessments for an existing case subject rather than collecting fresh provider evidence.

Need help with your account or an investigation? Contact support.