Recon For Sec

This is your entry point when you land on a new security target and need to figure out what you're actually dealing with before throwing payloads at it. It walks you through scoping assets, fingerprinting tech stacks, building endpoint inventories, and then routes you to the right testing methodology based on what you find. Think of it as the "look before you leap" skill that keeps you from wasting time on random enumeration. It explicitly links out to follow-up skills for API testing, auth issues, injection checks, and business logic flaws, plus has built-in checks for exposed SCM directories and dependency confusion vectors. Basically prevents you from starting penetration testing like a headless chicken.

skills.sh installs: 3.9K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill recon-for-sec --agent claude-code

Installs into .claude/skills of the current project.

Files

Recon and Methodology Router

This is the starting router for new targets and unknown attack surfaces.

When to Use

You just received a new target and do not yet know what to test first
You need to begin by drawing the surface from the application, then asset discovery, fingerprinting, and test-route planning
You want to build follow-up testing on structured methodology instead of random payload enumeration

Skill Map

Attack Surface Mapping — from one URL / one app, draw hosts, APIs, keys, and the object graph
Recon and Methodology
Insecure Source Code Management — .git/.svn/.hg exposure detection
Dependency Confusion — Supply chain reconnaissance for internal package names