Map attack surfaces of AI-assisted IDEs with tier-annotated reports.
npx skills add https://github.com/Mindgard/ai-ide-skills --skill ai-ide-recon
Please help me install this Agent Skill. Skill: ai-ide-recon Source: https://github.com/Mindgard/ai-ide-skills/tree/main/skills/ai-ide-recon Command: npx skills add https://github.com/Mindgard/ai-ide-skills --skill ai-ide-recon
Maps the attack surface of AI-assisted IDEs before vulnerability testing, helping security teams prioritize risks and reduce wasted effort.
Run this recon skill against a target workspace to generate a tiered attack surface map that guides subsequent vulnerability testing.
High-intent search queries and answers about installing and using this skill.
Identify the AI IDE attack surface by discovering config paths, auto-load files, and trust boundaries to produce a tier-annotated surface map. This map prioritizes risks like zero-click and agent-mediated vectors to focus subsequent vulnerability testing efforts.
A tiered attack surface map is a structured report detailing discovered workspace config paths, trust boundaries, and approval requirements. It categorizes interaction vectors by risk tier to prioritize vulnerability testing on zero-click and agent-mediated threats.
Find documentation blind spots and auto-load configurations by executing a workspace recon scan. The process discovers hidden config paths and trust boundaries that influence AI IDE behavior, outputting a structured report to inform remediation plans.
Yes, AI IDE attack surface recon applies to both open-source and closed-source targets. It maps interaction tiers and discovers auto-load configurations across diverse environments to reduce wasted testing effort.
Prioritize zero-click and agent-mediated vectors by generating a tier-annotated surface map. This approach highlights high-risk interaction paths and workspace trust boundaries to focus pattern-specific vulnerability testing.
After mapping the AI IDE attack surface, feed the structured report into pattern-specific vulnerability testing skills. The output directly informs subsequent testing for mcp-config-poisoning, terminal-filter-bypass, and ai-ide-data-exfil vectors.
pingmepiGenerate a structured 7-section product brief from a business statement.
KetomihineProvide offline ArchR documentation for scATAC-seq analysis workflows.
aggelosChatziioannouMonitor sub-agent activity and announce task lifecycle status updates.
ajsai47Analyze git diffs for SQL injection, race conditions, and shell injection risks.
