Agent skill · security · yaklang

recon-for-sec

Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.

Why this skill is useful

Provides a structured methodology for reconnaissance that the AI wouldn't reliably generate on its own.

What it needs

About 1k tokens when loaded. Last updated 2026-06-16. 1,563 stars on the source repository.

What this skill does

Recon and Methodology Router This is the starting router for new targets and unknown attack surfaces. When to Use You just received a new target and do not yet know what to test first You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning You want to build follow-up testing on structured methodology instead of random payload enumeration Skill Map Recon and Methodology Insecure Source Code Management — .git/.svn/.hg exposure detection Dependency Confusion — Supply chain reconnaissance for internal package names Recommended Flow 1. First confirm in-scope assets and target type 2. Then perform asset discovery, port/service identification, technology fingerprinting, and endpoint collection 3. Route based on collected findings to api-sec, auth-sec, injection-checking, or business-logic-vuln

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills yaklang/recon-for-sec

View the source on GitHub

Browse the @skills marketplace