Name: recon-for-sec
Author: yaklang

Imported from yaklang/hack-skills (skills/recon-for-sec/SKILL.md) via skills.sh. Install upstream with npx skills add yaklang/hack-skills --skill recon-for-sec. Copyright stays with the author.

Recon and Methodology Router

This is the starting router for new targets and unknown attack surfaces.

When to Use

You just received a new target and do not yet know what to test first
You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning
You want to build follow-up testing on structured methodology instead of random payload enumeration

Skill Map

Recon and Methodology
Insecure Source Code Management — .git/.svn/.hg exposure detection
Dependency Confusion — Supply chain reconnaissance for internal package names

Recommended Flow

First confirm in-scope assets and target type
Then perform asset discovery, port/service identification, technology fingerprinting, and endpoint collection
Route based on collected findings to api-sec, auth-sec, injection-checking, or business-logic-vuln

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

Install recon-for-sec and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "yaklang-hack-skills-recon-for-sec", "kind": "skill", "name": "recon-for-sec", "description": "Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.", "publisher": "yaklang", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path." ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/yaklang/hack-skills", "path": "skills/recon-for-sec/SKILL.md", "ref": "HEAD", "url": "https://www.skills.sh/yaklang/hack-skills/recon-for-sec", "key": "yaklang/hack-skills/skills/recon-for-sec/SKILL.md" } }, "instructions": "# Recon and Methodology Router\n\nThis is the starting router for new targets and unknown attack surfaces.\n\n## When to Use\n\n- You just received a new target and do not yet know what to test first\n- You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning\n- You want to build follow-up testing on structured methodology instead of random payload enumeration\n\n## Skill Map\n\n- [Recon and Methodology](../recon-and-methodology/SKILL.md)\n- [Insecure Source Code Management](../insecure-source-code-management/SKILL.md) — .git/.svn/.hg exposure detection\n- [De", "cost": { "context_tokens": 278 } }

recon-for-sec

About

Recon and Methodology Router

When to Use

Skill Map

Recommended Flow

Use it

Install recon-for-sec and it becomes one more candidate the router can pick - when it fits.

Manifest

Reviews