attack-surface-analyst

Discover and monitor internet-facing assets for external attack surface management.

Updated Feb 22, 2026
One-click install
npx skills add https://github.com/Muath2000/TradeStation --skill attack-surface-analyst
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: attack-surface-analyst
Source: https://github.com/Muath2000/TradeStation/tree/main/.claude/skills/attack-surface-analyst
Command: npx skills add https://github.com/Muath2000/TradeStation --skill attack-surface-analyst

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need for continuous discovery and assessment of internet-facing assets, helping organizations understand and mitigate their external attack surface for both their own infrastructure and their vendors.

Core Features & Use Cases

  • Comprehensive Asset Discovery: Utilizes DNS enumeration, subdomain discovery, port scanning, and SSL/TLS analysis to identify all internet-facing assets.
  • External Exposure Scoring: Assesses the risk associated with discovered assets and provides a score to prioritize remediation efforts.
  • Vendor Risk Monitoring: Extends monitoring to third-party vendor infrastructure to provide an external risk perspective.
  • Use Case: A security team can use this Skill to proactively identify any newly registered subdomains or misconfigured SSL certificates on their production environment before attackers can exploit them.

Quick Start

Begin by configuring the domains and IP ranges for your own infrastructure that need to be scanned.

Frequently Asked Questions about attack-surface-analyst

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover and monitor external attack surface assets across my infrastructure?

External attack surface monitoring discovers internet-facing assets through DNS enumeration, subdomain discovery, open port detection, and SSL/TLS certificate monitoring to identify exposures across your infrastructure.

Can I monitor third-party vendor infrastructure for external risk and shadow IT?

Yes, vendor risk monitoring extends external asset discovery to third-party infrastructure, providing an external risk perspective and identifying shadow IT on vendor networks for third-party risk management.

What is external exposure scoring and how does it prioritize attack surface remediation?

External exposure scoring assesses the risk associated with discovered internet-facing assets and provides a numerical score to help security teams prioritize remediation efforts for vulnerabilities and misconfigurations.

How do I detect misconfigured SSL certificates and newly registered subdomains?

SSL/TLS certificate monitoring and subdomain discovery continuously scan your domains to proactively identify newly registered subdomains and misconfigured SSL certificates before attackers can exploit them.

What do I need to set up external attack surface management for my production environment?

Begin external attack surface management by configuring the specific domains and IP ranges for your own production infrastructure that need to be continuously scanned for exposures and shadow IT.