SkillsAdd

yaklang/hack-skills

recon-for-sec

>- Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.

All-time #4312 Trending #7621 First seen Apr 8, 2026
8-week activity · all time api

Installation

$ npx skills add yaklang/hack-skills --skill recon-for-sec
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

reconciliation Similar name
anthropics/knowledge-work-plugins

Reconcile accounts by comparing GL balances to subledgers, bank statements, or third-party data…

3.1K installs
physical-ai-neural-reconstruction Similar name
nvidia/skills

Router for NVIDIA NuRec/NRE: USDZ rendering, NCore conversion, 3DGS, gRPC sensor sim, carline a…

2K installs
gl-recon Similar name
anthropics/financial-services

Reconcile general ledger to subledger for a trade date or period — match at the position or tra…

1.1K installs
reconciler-logic Similar name
grafana/skills

Implement reconcilers and watchers for grafana-app-sdk apps — write `TypedReconciler[*MyKind]` …

2.8K installs
recon-a-domain-passively Similar name
useosint/skills

>- End-to-end passive reconnaissance for a domain, website or IP — builds an asset inventory co…

1.7K installs
attribution-reconciler Similar name
aaron-he-zhu/aaron-marketing-skills

Use when platform-reported conversions disagree with GA4/ecommerce, when you suspect Meta and G…

11 installs

Also in this package

Other skills from yaklang/hack-skills · top by installs.

npx skills add yaklang/hack-skills
hack 3.5K android-pentesting-tricks 3.3K sqli-sql-injection 3.3K code-obfuscation-deobfuscation 3.3K api-sec 3.2K xss-cross-site-scripting 3.2K recon-and-methodology 3.2K business-logic-vulnerabilities 3.2K ssrf-server-side-request-forgery 3.1K waf-bypass-techniques 3.1K

Browse all from yaklang/hack-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 2.1K
License LICENSE
Default branch main
Open issues 0
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,385 B
  • docs SUMMARY.md 238 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 3,019 installs

SKILL.md

Recon and Methodology Router

This is the starting router for new targets and unknown attack surfaces.

When to Use

  • You just received a new target and do not yet know what to test first
  • You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning
  • You want to build follow-up testing on structured methodology instead of random payload enumeration

Skill Map

  • [Recon and Methodology](../recon-and-methodology/SKILL.md)
  • [Insecure Source Code Management](../insecure-source-code-management/SKILL.md) — .git/.svn/.hg exposure detection
  • [Dependency Confusion](../dependency-confusion/SKILL.md) — Supply chain reconnaissance for internal package names

Recommended Flow

  1. First confirm in-scope assets and target type
  2. Then perform asset discovery, port/service identification, technology fingerprinting, and endpoint collection
  3. Route based on collected findings to [api-sec](../api-sec/SKILL.md), [auth-sec](../auth-sec/SKILL.md), [injection-checking](../injection-checking/SKILL.md), or [business-logic-vuln](../business-logic-vuln/SKILL.md)