agentleFS
Sign inStart free
gl1tch0x1gl1tch0x1/SecAgent/skills/Recon/SKILL.md

Recon

Skill2 starsChanged 44 days agoMITView on GitHub

Build a bounded, attributed inventory of authorized assets and application routes. Discovery is an observation, not vulnerability proof. Output an asset inventory with provenance and a short list of hypotheses requiring separate proof.

27 other projects use a version of this.

Adopted by

Most recently taken up by

Used with

Projects with it also use reporting, osint and 3 more.

Other files people use alongside this one.

Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
  • GitHubSkill

    reporting

    Report formatting guidelines for gh-aw workflows (header levels, collapsible details, run-ID links)

    Also in 3 projects that use this

  • JosBen74Skill

    osint

    OSINT-sökning och informationsinhämtning från öppna källor för Länsstyrelsen VG

    Also in 4 projects that use this

  • samklee1Skill

    web-pentest

    Orchestrates authorized web app pentesting on Kali Linux using Opus sub-agents with difficulty-aware planning (TDA/EGATS), browser-first exploration, iterative verification, two-layer review (per-sub-agent + phase-level), optional cross-model gap audit (GPT/codex via codex-plugin-cc), and enforced KB updates. Trigger on: pentesting, penetration testing, web app security assessment, vulnerability assessment, OWASP testing, PTES, attack surface mapping, API security testing, pentest reporting, or 'help me test this app'. NOT for network-only pentesting, malware analysis, reverse engineering, or CTFs.

    Also in 3 projects that use this

  • SentrySkill

    create-pr

    Create pull requests following Sentry conventions. Use when opening PRs, writing PR descriptions, or preparing changes for review. Follows Sentry's code review guidelines.

    Also in 3 projects that use this

  • NVIDIASkill

    research

    Before designing a feature, research how comparable libraries solve the problem, check best practices, known pitfalls, and upstream changes. Use when starting a new feature, investigating an unfamiliar area, or the user asks to research something.

    Also in 3 projects that use this

The file

We split this skill into the rules it gives an agent

2 rules. 0 are common, 2 are distinctive, and 0 are very specific to this project.

  • 0

    Common

    Most of the 22 edited versions we read keep these.

  • 2

    Distinctive

    This author's own choices. Worth a look.

  • 0

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Distinctive:

    Start from the operator's exact scope and record the source of every hostname, URL and API template.

    line 5
  2. Distinctive:

    Stop at the shared request cap, per-host rate limit, crawl depth or deadline.

    line 10

“Common” is measured: kept by at least 6 in 10 of the 22 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Reconnaissance

Build a bounded, attributed inventory of authorized assets and application routes. Discovery is an observation, not vulnerability proof.

  1. Start from the operator's exact scope and record the source of every hostname, URL and API template.
  2. Combine passive DNS, HTTP links, JavaScript routes, browser network traffic and OpenAPI/HAR imports. Check scope before each live request.
  3. Preserve method, path, query, content type, body shape and authentication context. Mark write templates as inventory only until a state contract exists.
  4. Deduplicate normalized routes while retaining distinct methods and authorization contexts.
  5. Rank routes by trust boundary, sensitive data, role, and change risk. Prefer a narrow deep dive when the inventory reveals a valuable workflow.
  6. Stop at the shared request cap, per-host rate limit, crawl depth or deadline. Report the termination reason and inventory coverage.

Output an asset inventory with provenance and a short list of hypotheses requiring separate proof.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free