Sherlock CLI
The CLI searches public profiles by username so agents can gather links for a person’s or brand’s online presence review.
- 96,505 ★ on the repository
- Last commit
- MIT
Extended access
Why this level
- Requests disclose the queried username to sites, and saved reports aggregate public account information.
Install
In your terminal, with SkillFoxx CLI
npx skillfoxx add cli/sherlockDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- Requests disclose the queried username to sites, and saved reports aggregate public account information.
This is third-party code. Review the repository files before installing.
What it does
Sherlock checks a supplied username across supported sites. An agent can search an approved name, collect links and prepare a report for manual verification. This helps review your own accounts or a brand’s public presence without visiting every service separately. Multiple names and selected-site searches are supported. Results can be saved as text, CSV or Excel reports. Matching pages are candidates for inspection; a shared username alone does not establish account ownership.
Who it is for. Brand-presence researchers checking matching public account names across platforms.
Good fit when
- A brand needs public pages using its name collected.
- A user wants to check their own former username.
- An approved investigation compares several name variations.
- An agent prepares found links for a person to verify.
Not a fit when
- The task requires signing into private accounts or reading private messages.
- A matching username will be treated as definitive identity proof.
- The purpose is harassment or unauthorized collection of private information.
Example request
Check the approved brand username on selected sites and tabulate links without assigning account ownership before verification.Limitations
Results depend on site responses, so an unavailable page or changed site behavior can produce a wrong conclusion. Different people can share a username; verify each link’s ownership separately. Requests have a timeout, and reaching it does not prove an account is absent. The authors flag third-party ParrotOS and Ubuntu 24.04 packages as problematic and direct those users to a supported package or container route.
How to disable. Stop Sherlock and remove unneeded reports. Saved links and exported tables remain after uninstalling the program.
FAQ
Can I check several names at once?
Yes. Pass them as separate arguments.
How do I select sites?
Use `--site`, repeating it for additional platforms.
How do I get a table?
Choose `--csv` or `--xlsx`.
Does a match prove the intended person owns it?
No. Open the page and verify its content independently of the matching name.
Where are the command options?
Run `sherlock --help`.
Discussion
No questions or reviews yet.
Related
CLI toolsMaigret searches public accounts by username, extracts profile information and compiles findings into investigation reports.
An MCP server that runs the maigret OSINT tool in Docker: the agent checks where a username is taken and gets a report in the format you choose
An OSINT AI agent with an interactive mode, an MCP server and a CLI: about twenty tools to check domains, addresses, hashes and breaches
Devil's Eye: OSINT with a Russian layer
glaz-dyavola
An OSINT tool for passive reconnaissance: EGRUL, FSSP, VK, Telegram and Yandex alongside secret scanning and a 15-tool MCP server
A cyber threat intelligence and OSINT skill: structured investigations, domain and breach recon, analyst-grade reports
uncover is a network-asset search CLI that queries external indexes; discovered hosts still need separate availability checks.
README in short
Site definitions are separate from user reports. Verbose output and request timeouts support troubleshooting.