Agent Skills
› yaklang/hack-skills
› recon-for-sec
recon-for-sec
GitHub安全侦察与方法论路由技能，用于新目标资产发现、技术指纹识别和端点清单构建，指导后续API、认证等安全测试路径选择。
触发场景
接收新目标需确定测试范围
进行资产发现与技术指纹识别
规划结构化安全测试流程
安装
npx skills add yaklang/hack-skills --skill recon-for-sec -g -y
SKILL.md
Frontmatter
{
"name": "recon-for-sec",
"description": "Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path."
}
Recon and Methodology Router
This is the starting router for new targets and unknown attack surfaces.
When to Use
- You just received a new target and do not yet know what to test first
- You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning
- You want to build follow-up testing on structured methodology instead of random payload enumeration
Skill Map
- Recon and Methodology
- Insecure Source Code Management — .git/.svn/.hg exposure detection
- Dependency Confusion — Supply chain reconnaissance for internal package names
Recommended Flow
- First confirm in-scope assets and target type
- Then perform asset discovery, port/service identification, technology fingerprinting, and endpoint collection
- Route based on collected findings to api-sec, auth-sec, injection-checking, or business-logic-vuln
版本历史
- c9a4b9e 当前 2026-07-06 00:25
