recon

Map codebase architecture and classify files by risk priority for security analysis.

479|56|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/codexstar69/bug-hunter --skill recon-codexstar69
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon
Source: https://github.com/codexstar69/bug-hunter/tree/main/skills/recon
Command: npx skills add https://github.com/codexstar69/bug-hunter --skill recon-codexstar69

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps identify the most vulnerable parts of a codebase by mapping its architecture, pinpointing critical areas, and prioritizing them for security analysis.

Core Features & Use Cases

  • Architecture Mapping: Visualizes the structure and identifies key components.
  • Risk Prioritization: Classifies files and directories based on their potential for security vulnerabilities.
  • Trust Boundary Detection: Locates entry points for external input and sensitive data flows.
  • Use Case: Before a security audit, use this Skill to quickly understand which parts of a large application are most likely to contain bugs, allowing security engineers to focus their efforts efficiently.

Quick Start

Use the recon skill to map the architecture of the current project directory.

Frequently Asked Questions about recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map code architecture for bug hunting in a large codebase?

To map code architecture for bug hunting, this Skill scans source files, detects service boundaries, and classifies directories by risk priority. It handles large codebases by evaluating entire directories instead of individual files to prioritize security analysis.

What is code trust boundary detection for security risk assessment?

Trust boundary detection locates entry points for external input and sensitive data flows within the codebase. Identifying these trust boundaries helps pinpoint critical areas most likely to contain security vulnerabilities during a code analysis.

How do I prioritize recently changed files for a security audit?

To prioritize recently changed files for a security audit, this Skill integrates with Git repositories to identify recent modifications. It then classifies these updated files by their potential risk priority for targeted adversarial bug finding.

Can I use this reconnaissance approach for large repositories without analyzing individual files?

Yes, you can use this reconnaissance approach for large repositories. It supports large codebases by classifying entire directories instead of individual files, efficiently mapping architecture and identifying high-risk areas for security analysis.

When do I need architecture mapping before a security audit?

You need architecture mapping before a security audit when working with complex applications. It visualizes the codebase structure, identifies key components, and highlights vulnerable parts, allowing security engineers to focus their efforts efficiently.