Agent Skills
› yaklang/hack-skills
› recon-for-sec
recon-for-sec
GitHub作为安全测试的入口路由器，用于新目标的侦察与方法论规划。通过资产发现、攻击面映射和技术指纹识别，构建结构化测试路径，并路由至API、认证或注入等具体安全测试环节。
Trigger Scenarios
收到新目标且不知从何入手
需要绘制应用攻击面或进行资产发现
希望基于结构化方法论而非随机枚举进行测试
Install
npx skills add yaklang/hack-skills --skill recon-for-sec -g -y
SKILL.md
Frontmatter
{
"name": "recon-for-sec",
"description": "Entry P1 category router for reconnaissance and methodology. Use when mapping scope, drawing an attack surface from one application, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path."
}
Recon and Methodology Router
This is the starting router for new targets and unknown attack surfaces.
When to Use
- You just received a new target and do not yet know what to test first
- You need to begin by drawing the surface from the application, then asset discovery, fingerprinting, and test-route planning
- You want to build follow-up testing on structured methodology instead of random payload enumeration
Skill Map
- Attack Surface Mapping — from one URL / one app, draw hosts, APIs, keys, and the object graph
- Recon and Methodology
- Insecure Source Code Management — .git/.svn/.hg exposure detection
- Dependency Confusion — Supply chain reconnaissance for internal package names
Recommended Flow
- Confirm in-scope assets and target type
- Draw the surface from the application: attack-surface-mapping
- Route the inventory to api-sec, auth-sec, injection-checking, or business-logic-vuln
Version History
-
6fbf0bc
Current 2026-09-22 07:29
新增 attack-surface-mapping 技能，支持从单一应用绘制主机、API、密钥及对象图，作为侦察第一步。
- c9a4b9e 2026-07-06 00:25
