Agent Skills
› yaklang/hack-skills
› recon-for-sec
recon-for-sec
GitHub安全侦察与方法论路由技能，用于新目标的资产发现、技术指纹识别和端点清单构建。通过结构化方法论规划测试路径，并根据收集到的信息引导至API、认证或注入等具体安全测试领域。
Trigger Scenarios
收到新目标且未知如何开始测试
需要执行资产发现和技术指纹识别
希望基于结构化方法论而非随机枚举进行测试
Install
npx skills add yaklang/hack-skills --skill recon-for-sec -g -y
SKILL.md
Frontmatter
{
"name": "recon-for-sec",
"description": "Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path."
}
Recon and Methodology Router
This is the starting router for new targets and unknown attack surfaces.
When to Use
- You just received a new target and do not yet know what to test first
- You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning
- You want to build follow-up testing on structured methodology instead of random payload enumeration
Skill Map
- Recon and Methodology
- Insecure Source Code Management — .git/.svn/.hg exposure detection
- Dependency Confusion — Supply chain reconnaissance for internal package names
Recommended Flow
- First confirm in-scope assets and target type
- Then perform asset discovery, port/service identification, technology fingerprinting, and endpoint collection
- Route based on collected findings to api-sec, auth-sec, injection-checking, or business-logic-vuln
Version History
- c9a4b9e Current 2026-07-06 00:25
