Plan reconnaissance workflows for new security testing targets.
npx skills add https://github.com/sayseven7/frameseven --skill recon-for-sec-sayseven7
Please help me install this Agent Skill. Skill: recon-for-sec Source: https://github.com/sayseven7/frameseven/tree/main/internal/mcp/skills/recon-for-sec Command: npx skills add https://github.com/sayseven7/frameseven --skill recon-for-sec-sayseven7
This Skill helps security testers begin with a structured reconnaissance path instead of guessing where to probe first. It turns an unfamiliar target into a prioritized map of assets, technologies, endpoints, and next-step testing routes.
Ask the Skill to map a new target’s attack surface, confirm scope, and recommend the first security testing path.
High-intent search queries and answers about installing and using this skill.
Reconnaissance planning maps new targets by confirming scope, discovering assets, identifying services, and fingerprinting technologies. It provides a prioritized test-path routing instead of relying on random payload enumeration across unfamiliar endpoints.
Scope confirmation establishes exactly what assets are in bounds before any active testing begins. This ensures your reconnaissance workflow only maps authorized targets, preventing accidental probing of out-of-bounds infrastructure during asset discovery.
After endpoint discovery, you prioritize tests using follow-up routing to decide whether to target API security, authentication, injection, or business-logic assessments. This routes your testing efforts toward the highest-value attack surface areas first.
Yes, you can use this for technology fingerprinting and service identification. The reconnaissance workflow includes port and service identification alongside technology fingerprinting to build a complete inventory of the target's exposed attack surface.
Yes, this reconnaissance method supports structured follow-up routing directly into API security testing. After mapping the attack surface and inventorying endpoints, it recommends whether API, authentication, injection, or business-logic assessments are the best next step.
You should not use automated attack surface mapping when you lack authorized permission for the target scope. The methodology relies on authorized reconnaissance methods, meaning you must complete scope confirmation to ensure all asset discovery stays within approved testing boundaries.
YlikenMap target scope and plan initial reconnaissance routes.
jcastillotxAutomate API fuzzing across REST, GraphQL, and SOAP endpoints.
transilienceaiCoordinate subdomain discovery and port scanning to build a domain attack surface inventory.
matteocervelliAssess software vulnerabilities with CVSS scoring and remediation planning.
