sc-recon

Maps codebase architecture and technology stack for targeted security analysis.

56|5|Updated Apr 8, 2026

Search Tags:#architecture #security #monorepo #code-analysis #tech-stack #data-flow #entry-points

Ready to run

npx skills add https://github.com/ersinkoc/security-check --skill sc-recon

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: sc-recon
Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-recon
Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-recon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Codebase reconnaissance for security teams is a heavy lift; this skill maps architecture, technologies, data flows, entry points, and trust boundaries to provide a single source of truth for security analysis.

Core Features & Use Cases

Technology stack detection across multiple languages and frameworks
Entry-point and trust-boundary cataloging
Data-flow tracing from sources to sinks
Output architecture documentation to guide subsequent security checks
Use Case: Rapidly assess a large mono-repo to identify critical components and potential risk surfaces

Quick Start

Provide the repository path or project snapshot to generate a complete architecture map.

Frequently Asked Questions about sc-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I map codebase architecture for security analysis in a large monorepo?▼

Codebase architecture mapping identifies languages, frameworks, and trust boundaries to provide a single source of truth for security analysis. By tracing data flows from sources to sinks, you can rapidly assess monorepos to identify critical components and potential risk surfaces.

What is the best way to identify entry points and trust boundaries across multi-language repositories?▼

Identifying entry points and trust boundaries across multi-language repositories involves technology detection and entry-point cataloging. This process maps data flows from sources to sinks, producing architecture documentation that enables informed security remediation for downstream analysis.

Can I detect the technology stack and frameworks used across multiple languages in a single scan?▼

Yes, technology stack detection scans multi-language repositories to identify frameworks and languages in a single pass. This reconnaissance maps the architecture and catalogs entry points, enabling targeted security analysis across the entire codebase.

How does data-flow tracing from sources to sinks work for codebase reconnaissance?▼

Data-flow tracing tracks how untrusted input moves through a system from entry points to execution sinks. During codebase reconnaissance, this mapping reveals trust boundaries and security boundaries, producing architecture documentation that guides targeted vulnerability checks.

How to catalog entry points in a monorepo to guide downstream security checks?▼

Cataloging entry points in a monorepo requires scanning the technology stack to identify external input sources. This reconnaissance produces architecture documentation mapping data flows and trust boundaries, which informs and enables targeted downstream security remediation.

When should I perform codebase reconnaissance before running security analysis?▼

Codebase reconnaissance is necessary before security analysis when assessing large or unfamiliar monorepos. Mapping the architecture, technology stack, and trust boundaries first provides a single source of truth, enabling informed and targeted remediation rather than blind scanning.