Agent Skills
› yaklang/hack-skills
› recon-for-sec
recon-for-sec
GitHub安全侦察与方法论路由技能，用于新目标资产发现、技术指纹识别和端点清单构建，为后续API、认证等安全测试规划路径。
Trigger Scenarios
接收新目标且不确定测试方向
需要开始资产发现和技术指纹识别
希望基于结构化方法论而非随机载荷枚举进行测试
Install
npx skills add yaklang/hack-skills --skill recon-for-sec -g -y
SKILL.md
Frontmatter
{
"name": "recon-for-sec",
"description": "Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path."
}
Recon and Methodology Router
This is the starting router for new targets and unknown attack surfaces.
When to Use
- You just received a new target and do not yet know what to test first
- You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning
- You want to build follow-up testing on structured methodology instead of random payload enumeration
Skill Map
- Recon and Methodology
- Insecure Source Code Management — .git/.svn/.hg exposure detection
- Dependency Confusion — Supply chain reconnaissance for internal package names
Recommended Flow
- First confirm in-scope assets and target type
- Then perform asset discovery, port/service identification, technology fingerprinting, and endpoint collection
- Route based on collected findings to api-sec, auth-sec, injection-checking, or business-logic-vuln
Version History
- c9a4b9e Current 2026-07-06 00:25
