attack-surface-mapper

Maintaining an attack surface inventory requires tracking deployed systems, hosting, and exposure details. This skill builds a living record by discovering data from local project files and connected deployment tools, ensuring your security posture relies on documented facts rather than scattered notes.

Assessing the exposure of a single hosted service involves enumerating its surface area and checking for platform-specific misconfigurations. The skill performs a deep-dive on a named system to confirm its current state, reporting ranked findings with recommended fixes based on identified risks.

Yes, you can track security risks for multi-project environments without relying solely on manual entry. The skill requires discovery from connected deployment tools and local project files to automatically record technology stack, hosting, and authentication details for your deployed systems.

To check platform-specific misconfigurations for deployed APIs and databases, you initiate an assessment on the named system. The skill enumerates the surface area and evaluates current defenses and data sensitivity to report ranked findings and actionable fixes.

To review the attack surface of a specific domain or vendor, you need to provide direct user input about the named service. The skill uses this input alongside local project files to record technology stack, exposure, defenses, and known risks for your assessment.