Audit running web applications and generate a structured Confidence Letter.
npx skills add https://github.com/Bishwas-py/forge --skill recon-bishwas-py
Please help me install this Agent Skill. Skill: recon Source: https://github.com/Bishwas-py/forge/tree/main/skills/recon Command: npx skills add https://github.com/Bishwas-py/forge --skill recon-bishwas-py
Recon identifies and reports security, consistency, and quality issues in running web applications, delivering a structured Confidence Letter to guide fixes.
Run recon on a live web app to generate a Confidence Letter that Forge can parse and consume to drive fixes.
High-intent search queries and answers about installing and using this skill.
Automate security auditing by running recon against a live web app to identify security, consistency, and quality issues. It uses Playwright for UI crawling and Bash scripts for deterministic checks across UI, API, and DB layers.
A Confidence Letter is a structured report generated after auditing a web app, detailing identified security and consistency issues. It provides a triage format that downstream tools can parse to drive automated fixes.
Yes, Docker is required to create per-branch environments that safely reproduce findings. Dependencies like psql, mysql, and sqlite3 are also needed to perform cross-checks between the UI, API, and database layers.
Yes, you can perform end-to-end UI, API, and DB cross-checks simultaneously. The process uses Playwright for UI crawling and database clients to surface data mismatches and drift across the application stack.
The best way to scan live headers and CORS configurations is using automated programmatic security scans. This approach checks security headers, CORS policies, and cookies directly against the running UI and API endpoints.
You should avoid running autonomous security scans if the target web app lacks isolated Docker support or if the environment cannot safely accommodate per-branch reproduction of potential security findings and database modifications.
ajmeyers42Provision disposable Elastic deployments and write per-engagement credentials to a .env file.
buiminhduc23011Audit software projects for security, performance, and code quality issues.
BuilderIOAutomate browser interactions and Playwright test workflows via command-driven tooling.
z1439527767Organize security auditing workflows for vulnerability identification and remediation planning.
