skills.rest
Skobyn
SkobynCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hunt-source-leak

Detect source code and build artifact leaks in web applications.

Updated Jun 24, 2026
Search Tags:#source code analysis#security assessment#red teaming#API mapping#source code leak
One-click install
npx skills add https://github.com/Skobyn/talon --skill hunt-source-leak-skobyn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-source-leak
Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-source-leak
Command: npx skills add https://github.com/Skobyn/talon --skill hunt-source-leak-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies potential security vulnerabilities by uncovering source code and build artifact leakage from web applications.

Core Features & Use Cases

  • Source Code Leak Detection: Identifies hardcoded secrets, source maps, and other sensitive information within JavaScript files.
  • API Surface Mapping: Discovers Swagger/OpenAPI JSON endpoints that expose the application's API surface.
  • Git and Build Information: Exposes .git directories and build information files that may contain sensitive data.
  • Use Case: When conducting a security assessment, use this Skill to ensure that no sensitive information is inadvertently exposed through source code or build artifacts.

Quick Start

Use the hunt-source-leak skill to scan the target application for potential source code leakage.

Frequently Asked Questions about hunt-source-leak

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect source code leakage in web applications?▼

Source code leakage is detected by scanning web applications for exposed JavaScript files, source maps, and hardcoded secrets. This process identifies sensitive information inadvertently exposed through source code or build artifacts during security assessments.

What is the best way to find exposed API endpoints and Swagger JSON?▼

API surface mapping discovers exposed Swagger and OpenAPI JSON endpoints to reveal the application's API surface. This technique uncovers undocumented endpoints and potential security vulnerabilities during red teaming exercises.

How does source code analysis uncover hardcoded secrets and build information?▼

Source code analysis uncovers hardcoded secrets by parsing JavaScript files and exposing build information files. It identifies sensitive data, .git directories, and source maps left exposed in web application build artifacts.

Can I use this for red teaming and web application security assessments?▼

Yes, this approach applies directly to web application security assessments and red teaming exercises. It detects source code leaks, maps API surfaces, and extracts sensitive data to identify potential security vulnerabilities.

What tools do I need for source code analysis and API mapping?▼

Source code analysis requires tools for API mapping, data extraction, and scanning target applications. These tools work together to identify hardcoded secrets, source maps, and build artifacts that contain sensitive information.

Related Skills

Explore More Software Engineering Skills→
zhinkgitzhinkgit
551

gcc

Build CMake-based arm-none-eabi GCC projects and report ELF sizes in JSON.

Community
Advanced
rongarederongarede
4

security-review

Assess code and configuration for security vulnerabilities across backend services.

Community
Advanced
giosuetedeschi-specgiosuetedeschi-spec

Security Scanning Tools

Perform security vulnerability assessments and network discovery using Linux-based command-line tools.

Community
Advanced
OWASPOWASP
141

secrets-scan

Detect hardcoded secrets in source code and configuration files.

Official
Intermediate