yaklang/hack-skills
attack-surface-mapping
Draw a testable attack surface from one authorized target URL or one application. Use when the user says 攻击面, 供给面, 画攻击面, map the surface, application recon, find the business host, JS inventory, or when the only visible page is login. Derive hosts, APIs, keys, and the object graph from what the app already exposes. Do not open with directory brute or payload spray. Use when the user runs /attack-surface-mapping.
Installation
npx skills add https://github.com/yaklang/hack-skills
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
Given a change_brief YAML (output from diff-intake), generates an exhaustive list of candidate …
1.1K installsAudit the active repo, MCP servers, plugins, connectors, env surfaces, and harness setup, then …
61 installsDecide which integration surfaces a platform offers external developers and AI agents - REST, G…
330 installsTechniques for auditing and deciding the surface against the layers below — vocabulary, object …
1.9K installsReference: shared gap- and comment-tracker framework backing /regulatory-legal:gaps and /regula…
500 installsSuggest community skills based on recent activity in other plugins. Checks whether the communit…
497 installsAlso in this package
Other skills from yaklang/hack-skills · top by installs.
npx skills add yaklang/hack-skills
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Repository health
main