recon-auto-feed

Automate reconnaissance pipelines for offensive security engagements.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/noname300989/Security-Claw --skill recon-auto-feed
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-auto-feed
Source: https://github.com/noname300989/Security-Claw/tree/main/skills/recon-auto-feed
Command: npx skills add https://github.com/noname300989/Security-Claw --skill recon-auto-feed

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the time-consuming process of reconnaissance, providing a prioritized list of targets and findings so you can focus on manual testing.

Core Features & Use Cases

  • Comprehensive Reconnaissance: Automates subdomain enumeration, live host probing, technology fingerprinting, and endpoint discovery.
  • Prioritized Output: Surfaces the most interesting targets and findings in a human-readable brief, ready for manual exploitation.
  • Use Case: Before starting a penetration test, run this Skill overnight. In the morning, you'll have a curated list of potential vulnerabilities and attack vectors, saving hours of initial setup.

Quick Start

Run full recon on example.com and give me a prioritized testing list.

Frequently Asked Questions about recon-auto-feed

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate subdomain enumeration and vulnerability scanning for a penetration test?

You can automate subdomain enumeration and vulnerability scanning by running a recon pipeline that uses tools like subfinder, httpx, nmap, and nuclei. This Skill coordinates those tools to perform live host probing and endpoint discovery automatically.

Do I need to install subfinder, httpx, and nuclei before running automated reconnaissance?

Yes, you need to install external tools like subfinder, httpx, nmap, nuclei, ffuf, and whatweb. This Skill orchestrates these dependencies to execute subdomain enumeration and technology fingerprinting tasks.

What is the best way to prioritize targets for manual penetration testing?

The best way to prioritize targets is to generate a human-readable brief from your automated reconnaissance output. This Skill surfaces the most interesting findings and attack vectors, providing a curated list for manual exploitation.

Can I use this automated recon pipeline for overnight red teaming engagements?

Yes, you can use this automated recon pipeline for overnight red teaming engagements. Running it overnight provides a morning brief of prioritized targets and potential vulnerabilities, saving hours of initial setup.

Does technology fingerprinting work with whatweb during subdomain enumeration?

Technology fingerprinting works with whatweb during the reconnaissance pipeline. The Skill integrates whatweb alongside httpx and nmap to identify technologies running on discovered live hosts.

How do I discover hidden endpoints after finding live hosts in a recon scan?

You can discover hidden endpoints by running ffuf for endpoint discovery after probing live hosts. This Skill integrates ffuf into the reconnaissance pipeline to find directories and files on identified targets.