Analyze repository files to detect target types, technologies, and attack surfaces.
npx skills add https://github.com/pruiz/CodeCome --skill source-recon
Please help me install this Agent Skill. Skill: source-recon Source: https://github.com/pruiz/CodeCome/tree/main/.opencode/skills/source-recon Command: npx skills add https://github.com/pruiz/CodeCome --skill source-recon
This Skill streamlines the process of target reconnaissance by systematically gathering essential information about a project's structure, technologies, and attack surface.
Use the source-recon skill to analyze the repository structure, identify technologies, and generate reconnaissance notes.
High-intent search queries and answers about installing and using this skill.
To map an attack surface for security assessment, analyze project files, build scripts, and documentation to detect target types, technologies, and input points like APIs and CLI commands. This produces a detailed reconnaissance report without requiring source code execution.
Identifying technologies and frameworks in a target codebase involves systematically analyzing build scripts and project structure to recognize languages and setups like Python, Node.js, Java, or Docker. This models how the target is built and run to aid deployment understanding.
Yes, you can perform reconnaissance without executing source code by analyzing project files, build scripts, and documentation. This approach detects target types and maps input points exposed to attackers, generating a comprehensive model of the target environment safely.
Detect a target's type during vulnerability research by analyzing the repository's structure and files to identify whether it is a web app, CLI, library, or other type. This maps the attack surface and documents build execution to prepare for deeper analysis.
Source reconnaissance works with Docker setups, Java, Python, and Node.js environments by recognizing these specific frameworks and technologies through structural analysis. It documents the build and execution model to map the deployment configuration accurately.
sthiermannAudit software repositories for security, code health, dependencies, and structure.
InverterNetworkPerform authorized web application penetration testing with reconnaissance, vulnerability analysis, and proof-based exploitation.
bpnrockstarAutomate bug bounty hunting from reconnaissance through exploitation and reporting.
CENKSSSValidate SAST and DAST vulnerability exploitability through a 4-phase pipeline.
