What problem does it solve? Recon often uncovers scattered cloud clues—storage buckets, identity configs, tokens, backend endpoints—without a clear way to judge what they actually mean. This Skill turns those fragments into a structured capability assessment so testers know what access is implied and what to validate manually next. ## Core Features & Use Cases - Capability Bucketing: Normalizes discoveries into identity, data, storage, control plane, and messaging/automation categories. - Credential Classification: Distinguishes public client config from user-context, server-to-server, and admin artifacts to avoid over-claiming risk. - Service-to-Workflow Mapping: Ties each exposed service back to product behaviors like uploads, exports, sync jobs, and admin tooling. - Use Case: During an assessment, recon reveals a storage bucket name, a Cognito-style client ID, and a webhook endpoint. Use this Skill to map each clue to its trust boundary, score confidence, and produce a prioritized list of manual follow-up tests. ## Quick Start Triage these recon findings of exposed cloud services and credentials into a capability map with prioritized manual validation steps.
