What problem does it solve? Security auditors and code reviewers waste hours orienting themselves in unfamiliar codebases before they can find vulnerabilities. This Skill provides a structured, five-phase methodology for mapping architecture, trust boundaries, entry points, and security-critical functions before deep analysis begins. ## Core Features & Use Cases - Phased Recon Methodology: Progresses from overview and technology stack detection through architecture mapping, module deep dives, function-level analysis, and detail reconnaissance. - Trust Boundary & Entry Point Mapping: Produces concrete artifacts like endpoint inventories, data flow diagrams, and call graphs for security-critical functions. - Ready-Made Resources: Includes a recon checklist, a security question bank, a context document template, and a complete FastAPI web application walkthrough example. - Use Case: Before auditing a FastAPI e-commerce API, run the recon phases to enumerate all endpoints, identify JWT authentication weaknesses, and flag a race condition in the order creation flow as a high-risk area. ## Quick Start Ask the agent to perform a security reconnaissance of your codebase and produce a context document mapping its architecture, trust boundaries, and highest-risk areas.
