Agent skill · security · yaklang
insecure-source-code-management
Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds VCS paths, 403 on hidden dirs, or backup/config leaks during authorized testing.
Why this skill is useful
Adds specific detection and recovery scripts for exposed version control systems that the AI wouldn't generate on its own.
What it needs
Requires anantshri/svn-extractor, arthaud/git-dumper, gehaxelt/ds-store, internetwache/gittools, lijiejie/ds_store_exp, sahildhar/mercurial_source_code_dumper, wangyihang/githacker installed locally. About 3k tokens when loaded. Last updated 2026-06-16. 1,563 stars on the source repository.
What this skill does
SKILL: Insecure Source Code Management AI LOAD INSTRUCTION: This skill covers detection and recovery of exposed version-control metadata, common backup artifacts, and related misconfigurations. Use only in authorized assessments. Treat recovered credentials and URLs as sensitive; do not exfiltrate real data beyond scope. For broad discovery workflow, cross-load recon-for-sec and recon-and-methodology when those skills exist in the workspace. 0. QUICK START High-value paths to probe first (GET or HEAD, respect rate limits): Routing note: quickly probe these paths first; for full recon workflow, load methodology from recon-for-sec and recon-and-methodology before deeper testing. --- 1. GIT EXPOSURE Detection /.git/HEAD — valid repo often returns plain text like: /.git/config — may expose remote.origin.url, user identity, or embedded credentials. /.git/index, /.git/objects/ — partial object store access enables reconstruction with the right tools. 403 vs 404 404 — path likely absent or fully blocked at the edge. 403 on /.git/ — directory may exist but listing is denied; still try direct file URLs: A 403 on the directory plus 200 on HEAD strongly indicates exposure. Recovery tools (open source) arthaud/git-dumper — dumps reachable .git tree when individual files are fetchable. internetwache/GitTools — Dumper, Extractor, Finder modules for partial/corrupt dumps. WangYihang/GitHacker — alternative recovery when standard dumpers miss edge cases. Key files to prioritize Path Why it matters ------ ---------------- .git/config Remotes, credentials, hooks paths .git/logs/HEAD Commit history, reflog-style leakage .git/refs/heads/ Branch tips, commit SHAs .git/packed-refs Packed branch/tag refs .git/objects/ Object blobs for reconstruction --- 2. SVN EXPOSURE Detection SVN before 1.7: /.svn/entries — XML or text metadata listing paths and revisions. SVN ≥ 1.7: /.svn/wc.db — SQLite working copy database (PRAGMA tableinfo after download). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills yaklang/insecure-source-code-management