Install
$ agentstack add skill-kdr-overcast-overcast-stakeout ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
overcast-stakeout
Use this skill when the task is to sit on a target and catch new media as it is published (a "stakeout"), rather than a one-shot recon pass. Use the broad overcast skill and overcast/reference/verbs.md for exact flags. Only start a continuous loop when the user asks for ongoing monitoring.
Workflow
- Set the standing scope. As new media arrives, matches auto-suggest leads —
score/text triggers (a face ≥75 match, an image RANSAC hit, similar ≥85, cluster ≥70, or a text target the watch/listen text mentions) emit status:"suggested" findings that queue for triage (out of ask/brief until reviewed). --findings suggest is the default; pair it with --auto-sense watch:
overcast doctor --sources --json
overcast case init --json
overcast case setup --name stakeout --target "" --source "x:@handle,youtube:@channel" --auto-sense watch --findings suggest --yes --json
- Sanity pass — one diff cycle, scheduler-friendly, to confirm sources resolve
before you leave a loop running:
overcast monitor --once --pipe watch --json
- Stand the watch up. Run the continuous loop under tmux;
--alertmirrors new
records to a sink and --brief summarizes each batch:
overcast monitor --every 15m --limit 5 --pipe watch --alert ./stakeout.jsonl --brief --json
- Work the triage queue as leads accrue —
finding list --state triageshows the
suggested leads awaiting review; accept promotes a lead to evidence (it enters ask/brief), dismiss blocks it (never re-suggested for that match, but still auditable):
overcast finding list --state triage --json
overcast finding accept --json
overcast finding dismiss --json
- Keep the control-room wall up as the visual surface — every case video muted
and looping at its best evidence moment, freshest first, auto-restarting:
overcast wall --refresh 60 --theme csi --json
overcast wall --source x --since 24h --theme csi --json # scope to one feed / window
overcast brief --export ./stakeout.html --json # periodic cited report
Face-forward stakeout. A face/image suspect is an image target, which is excluded from text auto-findings. Pipe detection instead (monitor --pipe face) to surface faces in new media, then escalate the flagged clips manually with overcast face --match ./suspect.jpg --json, or keep a face-analysis index and search it (face --match ./suspect.jpg --index ).
Page-watch stakeout. To sit on a WEB PAGE instead of a feed, register the rendered-page source: overcast source add browser: (no key; playwright optional dep), then monitor --every 30m — each pass re-renders the current page state to a PNG that flows into image auto-sense.
Live watch surface. wall is the static option (a written HTML snapshot you regenerate). For a LIVE self-updating page, an operator serves the situation room — overcast situation in its own pane, or /situation on in the TUI — with --every letting the page own the monitor cadence. Opening the listener is an operator action; the agent never runs serve. The agent then retunes it with situation set, reads situation status, and halts it with situation stop as leads accrue. Full drill: overcast-situation-room.
Output
A standing case that accrues cited findings over time: accepted matches with their source URL, record.id, and media.at; the alert-sink JSONL of new records; the freshness-overlaid wall; and periodic brief exports. State the cadence and which sources are live.
Caveats
Hard processing failures are marked seen (no infinite retry); credential/pending gaps stay retryable — run doctor --sources when a feed goes quiet. Apify-backed sources (x, tiktok, lens) bill per result, so keep --limit low on a frequent loop. The wall decodes real video — ~25 tiles is a practical ceiling (--limit); use --source/--since to scope it. Auto-findings are keyword matches on sensed text, so they shortlist — confirm before acting.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: kdr
- Source: kdr/overcast
- License: Apache-2.0
- Homepage: https://overcast.video
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.