uphiagoCommunity·150 Agent Skills Included

recon-skills

Offensive security playbooks for recon, vulnerability hunting, and reporting

Guides AI agents through authorized penetration testing and bug bounty workflows, from subdomain recon to exploit validation. Covers 50+ vulnerability classes including XSS, SQLi, SSRF, IDOR, CORS, SAML, Kubernetes, CI/CD pipelines, and LLM prompt injection. Eliminates guesswork with step-by-step probe commands, false-positive gates, and severity scoring rules. Includes report-writing templates for HackerOne, Bugcrowd, and enterprise red-team deliverables.

1,224|212

↗

npx skills add uphiago/recon-skills --all -g -y

All Skills in This Repository (150)

Pure Emerald Level Indicators

📦 In Repo

uphiago

agentiko-worker

Operate restricted Alpine Linux containers for reconnaissance and penetration testing tasks.

agentiko-hermes

Automate distributed offensive security reconnaissance and pentesting workflows via Telegram and SSH containers.

docker-privesc

Escalate Docker container privileges to host root access.

recon-plumbing

Identify exposed PII, payment endpoints, and misconfigurations on plumbing company websites.

recon-daycare

Detect exposed minor PII and WordPress vulnerabilities in daycare websites.

hunt-llm-ai

Identify exploitable LLM/AI vulnerabilities crossing trust boundaries with validation gates.

recon-roofing

Enumerate roofing company domains, WordPress assets, and insurance claim endpoints.

hunt-api-misconfig

Detect API security misconfigurations across REST, OData, GraphQL, and ASP.NET Core APIs.

hunt-write-gap

Detect unprotected write endpoints in authenticated APIs for penetration testing.

hunt-cors

Detect CORS misconfigurations enabling credentialed cross-origin reads of authenticated data.

meme-coin-audit

Detect rug pull vectors and security flaws in EVM and Solana token contracts.

recon-churches

Discover church domains and detect WordPress vulnerabilities for authorized penetration testing.

Community

Intermediate

Frequently Asked Questions

FAQPage Schema

How to install recon-skills?▼

Run `npx skills add uphiago/recon-skills --all -g -y` in your terminal to install the full skill pack globally.

What does recon-skills do?▼

It gives your AI agent step-by-step offensive security playbooks for reconnaissance, vulnerability hunting, and report writing on authorized targets. Each skill covers one attack class with commands, validation gates, and severity guidance.

Can I use recon-skills for bug bounty hunting?▼

Yes. It includes a full bug bounty methodology, platform-specific report templates for HackerOne and Bugcrowd, and triage gates to avoid submitting invalid findings.

Does recon-skills work with Claude Code and other AI agents?▼

Yes. Every playbook follows the standard SKILL.md format, so it loads directly into Claude Code, Cursor, and other compatible agents.

Is recon-skills legal to use?▼

Only on systems you own or have explicit written permission to test. The skills are designed for authorized penetration testing and bug bounty programs, and unauthorized use may be illegal.