What problem does it solve? After subdomain, ASN, port, and URL collection, security teams face noisy asset lists where third-party services, brand collisions, and stale hosts are mixed with real targets, risking out-of-scope testing. This Skill turns that raw OSINT output into ownership-aware, scope-safe decisions with a deterministic JSON action queue. ## Core Features & Use Cases - Ownership classification: Labels each asset as confirmed, unverified, third_party, brand_collision, soft_404, stale, or out_of_scope, with hard stops preventing active testing of non-owned assets. - Deterministic prioritization: Scores assets by ownership, liveness, exposed ports, technology signals, and independent sources, with balanced, conservative, and aggressive modes. - Tool routing: Maps each decision to concrete next actions such as naabu port scans, httpx fingerprinting, katana crawling, or arjun parameter discovery, routed through Kali CLI or MCP. - Use Case: After running subfinder and asnmap against a target organization, feed the combined JSONL into the decision layer to get a ranked list of confirmed in-scope web assets plus a quarantine list of brand collisions before any active probing. ## Quick Start Run the asset decision layer on my collected recon results with owned domain example.com and show me the ranked assets and next actions.
