Recon For Sec skill: what it does and how to install it
Routes security reconnaissance from scope confirmation through attack-surface mapping, asset discovery and prioritised testing paths.
Summary generated from the skill's documentation.
Install
$ npx skills add yaklang/hack-skills --skill recon-for-secRun it in a terminal. If your agent is already running, start a new session so it picks the skill up.
About this skill
What it does. Routes a new security target through a structured reconnaissance workflow. It starts by confirming scope and target type, maps hosts, APIs, keys and object relationships from the application, then directs the inventory to relevant testing paths such as API, authentication, injection or business logic checks.
When to use it. Use it at the start of an assessment when the attack surface is unknown or you need a methodical first testing path. It also points to checks for exposed source-control metadata and dependency-confusion opportunities.
History
Repo stars
2.5k+177 since 5 Oct 2026
Stars are counted for the whole repository, which holds 15 skills.
Show as a table
| Date | Repo stars |
|---|---|
| 26 Oct 2026 | 2,549 |
| 25 Oct 2026 | 2,538 |
| 24 Oct 2026 | 2,533 |
| 23 Oct 2026 | 2,528 |
| 22 Oct 2026 | 2,523 |
| 21 Oct 2026 | 2,521 |
| 20 Oct 2026 | 2,513 |
| 19 Oct 2026 | 2,508 |
| 18 Oct 2026 | 2,492 |
| 17 Oct 2026 | 2,466 |
| 16 Oct 2026 | 2,458 |
| 15 Oct 2026 | 2,455 |
| 14 Oct 2026 | 2,450 |
| 13 Oct 2026 | 2,443 |
| 12 Oct 2026 | 2,437 |
| 11 Oct 2026 | 2,426 |
| 10 Oct 2026 | 2,418 |
| 9 Oct 2026 | 2,412 |
| 8 Oct 2026 | 2,401 |
| 7 Oct 2026 | 2,382 |
| 6 Oct 2026 | 2,375 |
| 5 Oct 2026 | 2,372 |
Installs
3.7k+118 since 19 Oct 2026
Installs via skills.sh
Show as a table
| Date | Installs |
|---|---|
| 26 Oct 2026 | 3,710 |
| 25 Oct 2026 | 3,694 |
| 24 Oct 2026 | 3,679 |
| 23 Oct 2026 | 3,662 |
| 22 Oct 2026 | 3,645 |
| 21 Oct 2026 | 3,625 |
| 20 Oct 2026 | 3,609 |
| 19 Oct 2026 | 3,592 |
Similar skills
- Writing SkillsGuides creating, editing and testing skills before they are deployed.
- Webapp TestingTests local web applications with Playwright: verify frontend behaviour, debug the UI, capture screenshots and read browser logs.
- Lean BuildBuilds a feature within strict scope, reusing what the repository already has and stopping at an explicit condition.