recon-tree-services
CommunityUncover vulnerabilities in tree service company sites.
System Documentation
What problem does it solve?
Penetration testers and red teamers targeting tree service companies waste time on generic reconnaissance workflows when these small to medium businesses have predictable, sector-specific weak points including exposed customer PII, unprotected CRM portals, and misconfigured industry tools.
Core Features & Use Cases
- Sector-specific platform detection: Automatically identifies common CMS (WordPress, custom PHP) and industry tools (Arborgold, Jobber, ArborNote, SingleOps) used by tree service companies.
- Attack surface enumeration: Locates high-value targets including estimate forms, photo galleries, service area pages, and customer portal subdomains.
- Vulnerability checks: Tests for common issues like debug log exposure, directory listing on uploads, unrestricted Google Maps API keys, and weak CRM portal authentication.
- Use Case: When assessing a tree service company's web presence, this skill automates checks for exposed customer estimate data and unrestricted mapping API keys that could be abused for cost theft.
Quick Start
Use the recon-tree-services skill to perform a full sector-specific reconnaissance of the target tree service company domain, identifying all exposed PII, API keys, and common WordPress vulnerabilities.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: recon-tree-services Download link: https://github.com/uphiago/recon-skills/archive/main.zip#recon-tree-services Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 537,000+ vetted skills library on demand.