Recon
Facilitates security reconnaissance by mapping network infrastructure and identifying assets through passive and active scanning techniques.
Install this skill
Security score
The Recon skill was audited on May 24, 2026 and we found 14 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 24 | curl -s -X POST http://localhost:8888/notify \ |
Access to hidden dotfiles in home directory
| 9 | `~/.claude/skills/CORE/USER/SKILLCUSTOMIZATIONS/Recon/` |
Access to hidden dotfiles in home directory
| 238 | - Note: Requires security MCP profile (`~/.claude/MCPs/swap-mcp security`) |
Access to hidden dotfiles in home directory
| 378 | - **Work scratch/** (`~/.claude/MEMORY/WORK/{current_work}/scratch/`) - For iterative artifacts during investigation |
Access to hidden dotfiles in home directory
| 379 | - **MEMORY/RESEARCH/** (`~/.claude/MEMORY/RESEARCH/YYYY-MM/`) - For pentest engagements and formal assessments |
Access to hidden dotfiles in home directory
| 388 | ~/.claude/MCPs/swap-mcp security |
Access to hidden dotfiles in home directory
| 436 | Report: ~/.claude/MEMORY/WORK/{current_work}/scratch/recon-example-com/ |
Access to hidden dotfiles in home directory
| 511 | - `~/.claude/skills/OSINT/` - Entity and people reconnaissance |
Access to hidden dotfiles in home directory
| 512 | - `~/.claude/skills/Webassessment/` - Web application testing |
Access to .env file
| 224 | - API Key: `process.env.IPINFO_API_KEY` |
External URL reference
| 24 | curl -s -X POST http://localhost:8888/notify \ |
External URL reference
| 515 | - IPInfo API: https://ipinfo.io/developers |
External URL reference
| 516 | - Certificate Transparency: https://crt.sh |
External URL reference
| 520 | - OWASP Testing Guide: https://owasp.org/www-project-web-security-testing-guide/ |