Routes reconnaissance tasks to methodology skills for asset discovery and security testing.
npx skills add https://github.com/lNwNl/Praxis --skill recon-for-sec-lnwnl
Please help me install this Agent Skill. Skill: recon-for-sec Source: https://github.com/lNwNl/Praxis/tree/main/skills/recon-for-sec Command: npx skills add https://github.com/lNwNl/Praxis --skill recon-for-sec-lnwnl
High-intent search queries and answers about installing and using this skill.
Begin by confirming in-scope assets and target type, then perform asset discovery, port and service identification, technology fingerprinting, and endpoint collection. This Skill routes those steps and recommends the first high-value testing path based on findings.
Route based on collected findings to specialized testing skills: api-sec for API surfaces, auth-sec for authentication flows, injection-checking for injection points, or business-logic-vuln for workflow flaws. Recon output determines which path is highest value.
Use the insecure-source-code-management skill linked from this router. It covers detection of exposed version control directories such as .git, .svn, and .hg discovered during the reconnaissance phase.
Dependency confusion recon identifies internal package names that could be claimed on public registries, a supply chain attack vector. The dependency-confusion skill linked here handles that supply chain reconnaissance workflow.
Skip the router when the target and vulnerability class are already known, such as a focused injection retest. The router is designed for new targets and unknown attack surfaces where the testing path is not yet determined.
deanpetersGenerate a comprehensive, equity-aware stakeholder list for a product initiative.
yongwoonAudit software projects for OWASP Top 10 and prompt injection vulnerabilities.
JingyueCongDiscovers and analyzes internet-exposed assets using the Shodan API.
securityfortechFuzz object identifiers in URLs, bodies, and headers to detect BOLA and IDOR vulnerabilities.
