What problem does it solve? Security auditors and code reviewers waste hours orienting themselves in unfamiliar codebases before they can find vulnerabilities. This Skill provides a structured, phased reconnaissance methodology that builds understanding from high-level architecture down to individual security-critical functions. ## Core Features & Use Cases - Phased Recon Methodology: Five phases covering overview, architecture mapping, module deep dives, function-level analysis, and detail reconnaissance, each with concrete shell commands and templates. - Trust Boundary & Entry Point Mapping: Systematically identifies where trust levels change, enumerates HTTP/WebSocket/CLI/queue entry points, and traces data flows through the system. - Ready-Made Audit Artifacts: Includes a recon checklist, a security question bank organized by domain, a context document template, and a complete FastAPI walkthrough example. - Use Case: Before auditing a new web application, run the recon phases to produce a Security Context Document listing the tech stack, entry points, critical functions, and high-risk areas, then focus deep testing on the identified priorities. ## Quick Start Ask the AI to perform a code recon on this repository and produce a security context document covering the architecture, trust boundaries, entry points, and highest-risk areas.
