Verified:GitHub

project-discovery-workflow

Name: project-discovery-workflow
Availability: InStock
Author: cmndcntrl

Automate project discovery with a 4-phase pipeline for asset enumeration, fingerprinting, vulnerability scanning, and alerting.

3|Updated Nov 12, 2025

Search Tags:#reconnaissance #project discovery #red team #pentest #recon pipeline

Ready to run

npx skills add https://github.com/cmndcntrlcyber/rtpi --skill project-discovery-workflow

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: project-discovery-workflow
Source: https://github.com/cmndcntrlcyber/rtpi/tree/main/knowledge_seed/project-discovery-workflow
Command: npx skills add https://github.com/cmndcntrlcyber/rtpi --skill project-discovery-workflow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subfinder, naabu, katana, cloudlist, uncover, alterx, httpx, dnsx, tlsx, nuclei, interactsh, cvemap, notify, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill solves the problem of efficiently discovering and reconnoitering projects, providing a comprehensive 4-phase pipeline that covers discovery, enrichment, detection, and notification.

Core Features & Use Cases

4-Phase Pipeline: Discover, Enrich, Detect, Notify - an organized approach to reconnaissance.
Toolchain Integration: Integrates with a suite of tools like subfinder, naabu, katana, cloudlist, and more.
Customization: Tailored for bug-bounty or pentest recon pipelines, and troubleshooting specific tools.
Use Case: For example, when setting up a bug bounty or pentest recon pipeline, this Skill can be used to streamline the process and improve efficiency.

Quick Start

To start the discovery phase, run: subfinder -d target.com -all -recursive -silent | tee subs.txt

Frequently Asked Questions about project-discovery-workflow

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate a recon pipeline for red team operations?▼

A pentest recon pipeline is structured into four phases: discover, enrich, detect, and notify. It chains tools like subfinder for subdomain enumeration, naabu for port scanning, and nuclei for vulnerability scanning to systematically identify and assess target assets.

How do I set up a bug bounty recon pipeline with subfinder and nuclei?▼

Yes, you can use this recon pipeline for bug bounty hunting as it is specifically tailored for that use case. It automates asset discovery and vulnerability scanning across target domains, improving efficiency during security assessments.

What is the best way to structure a reconnaissance workflow for penetration testing?▼

The best way to structure penetration testing reconnaissance is through a phased pipeline: discovery, enrichment, detection, and notification. This method organizes tasks from initial subdomain finding with subfinder to vulnerability scanning with nuclei and final alerting.

Does this recon pipeline require specific tools like katana and httpx to run?▼

The reconnaissance pipeline integrates tools like uncover and cvemap for vulnerability detection and mapping. Additionally, it uses notify to handle the final alerting phase, ensuring you receive notifications when vulnerabilities or exposed assets are detected.