About recon-for-sec
A starting-point security skill for planning reconnaissance on new targets and unfamiliar attack surfaces. It guides analysts from scope confirmation and application mapping to routing findings toward focused testing methods.
Key features
- 01Confirms target scope and type
- 02Maps application attack surfaces
- 03Organizes hosts, APIs, keys, and objects
- 04Routes findings to follow-up security skills
Use cases
- 01Planning initial tests for a new target
- 02Building an attack-surface inventory
- 03Choosing focused follow-up testing
Install
Copy the command and run it in a terminal.
$
npx skills add https:/After installing, type/recon-for-secin Claude Code to confirm it loaded.
Details
From the project READMERecon and Methodology Router
This is the starting router for new targets and unknown attack surfaces.
When to Use
- You just received a new target and do not yet know what to test first
- You need to begin by drawing the surface from the application, then asset discovery, fingerprinting, and test-route planning
- You want to build follow-up testing on structured methodology instead of random payload enumeration
Skill Map
- Attack Surface Mapping — from one URL / one app, draw hosts, APIs, keys, and the object graph
- Recon and Methodology
- Insecure Source Code Management — .git/.svn/.hg exposure detection
- Dependency Confusion — Supply chain reconnaissance for internal package names
Recommended Flow
- Confirm in-scope assets and target type
- Draw the surface from the application: attack-surface-mapping
- Route the inventory to api-sec, auth-sec, injection-checking, or business-logic-vuln
Comments
Markdown supported