skills.rest
Ap6pack
Ap6packCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

analysis-and-reporting

Score external reconnaissance findings into prioritized severity classifications and attack-path guidance.

4|Updated Apr 29, 2026
Search Tags:#reconnaissance#api analysis#severity scoring#attack paths#vulnerability prioritization#evidence preservation#mobile recon
One-click install
npx skills add https://github.com/Ap6pack/outrider-recon --skill analysis-and-reporting
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: analysis-and-reporting
Source: https://github.com/Ap6pack/outrider-recon/tree/main/skills/analysis-and-reporting
Command: npx skills add https://github.com/Ap6pack/outrider-recon --skill analysis-and-reporting

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill transforms external reconnaissance observations into consistently scored, severity-ranked, evidence-backed findings while keeping analysis within authorized engagement, scope, and evidence-preservation controls.

Core Features & Use Cases

  • Endpoint Interest Scoring: Assigns 0–100 scores to API endpoints using signals such as unauthenticated writes, GraphQL introspection, CORS behavior, sensitive paths, and schema leakage.
  • Severity and Attack-Path Analysis: Applies decision matrices, sector-specific overrides, and attack-path hint templates to prioritize findings and guide safe next-step workflows.
  • Mobile and Evidence Workflows: Evaluates mobile app ownership confidence, preserves artifact metadata, coordinates outputs through sidecar JSON, and supports vulnerability prioritization and reporting.
  • Use Case: Analyze an authorized API inventory, identify high-interest endpoints, classify their severity, attach relevant attack-path hints, and prepare findings for client deliverables.

Quick Start

Ask the skill to score the supplied authorized reconnaissance findings, apply sector-specific severity rules, generate attack-path hints, and produce report-ready output.

Frequently Asked Questions about analysis-and-reporting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize vulnerability findings from API reconnaissance data?▼

Vulnerability prioritization applies threshold-based scoring to API reconnaissance evidence, converting signals like unauthenticated writes and schema leakage into ranked severity classifications. It uses decision matrices to classify findings and guide safe attack-path workflows.

How does endpoint interest scoring work for API analysis?▼

Endpoint interest scoring evaluates API reconnaissance signals by assigning 0–100 scores based on factors like GraphQL introspection, CORS behavior, and sensitive path exposure. This scoring mechanism helps identify high-interest endpoints for further penetration testing.

Can I score mobile reconnaissance findings and track artifact ownership confidence?▼

Mobile recon evaluates app ownership confidence while preserving artifact metadata through coordinated sidecar JSON outputs. This process supports vulnerability prioritization by maintaining evidence hashes and timestamps for reporting workflows.

What is the best way to convert external reconnaissance evidence into report-ready findings?▼

Converting external reconnaissance evidence into report-ready findings requires applying severity decision matrices, sector-specific overrides, and attack-path hint templates. This ensures consistently scored, evidence-backed outputs suitable for client deliverables.

Does vulnerability prioritization support regulated-sector assessments with specific compliance overrides?▼

Regulated-sector assessments are supported through specific severity overrides applied during the vulnerability prioritization process. These overrides adjust decision matrices to ensure scoring and attack-path guidance align with sector-specific compliance requirements.

When should I apply safe operational gating during attack-surface analysis?▼

Safe operational gating should be applied during attack-surface analysis whenever processing external reconnaissance findings to ensure analysis remains within authorized engagement scope and maintains evidence-preservation controls.

Related Skills

Explore More Software Engineering Skills→
Ap6packAp6pack
4

people-breach-intel

Prioritize breach exposure and identity signals for authorized external reconnaissance.

Community
Advanced
ApegurusApegurus
1

report-template

Generate a standardized markdown template for smart contract security audit reports.

Community
Basic
langbyyilangbyyi
96

recon-and-methodology

Create structured reconnaissance plans for authorized security testing and bug bounty engagements.

Community
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate