AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Redteam Recon Intake

skill-netw0rknoob-vulnclaw-redteam-recon-intake · by Netw0rkNoob

Recon intake skill for first contact with a bare domain, URL, or IP address. Use to build an initial recon_profile and provide factual inputs for CVE lookup and attack-path routing.

↗ Website ↗ Repository
— No reviews yet
0 installs
0 views
— view→install

Install

$ agentstack add skill-netw0rknoob-vulnclaw-redteam-recon-intake

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-netw0rknoob-vulnclaw-redteam-recon-intake)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● today

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Redteam Recon Intake? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Recon Intake

Domain

裸域名/URL/IP 首次进入安全评估时的侦察入口。 负责从零建立目标资产画像(recon_profile)，为后续 CVE Lookup 和攻击路径分配提供事实依据。

阶段顺序：

  1. DNS 解析 + 存活探测
  2. 端口扫描 + 服务指纹
  3. 子域枚举
  4. Web 目录/敏感文件探测
  5. WAF/CDN 识别
  6. 技术栈指纹(CMS/框架/中间件版本)

Boundaries

  • 不执行任何主动漏洞利用
  • 不发送破坏性请求(DELETE/DROP/shutdown)
  • 仅探测当前目标，不自动扩展到任务中未出现的关联域名/IP
  • 不进行暴力破解或密码喷洒
  • 不绕过速率限制(如被限速则降速或暂停)
  • 侦察深度止于信息收集，不进入漏洞验证阶段

Pivot Hints

  • WAF/CDN 阻断直连 → 尝试历史 DNS、邮件头、证书搜索获取真实 IP
  • 子域枚举受限 → 证书透明度日志、DNS 区域传送、关联域反查
  • 目录扫描被封 → 降速、换 User-Agent、使用自定义字典
  • 端口全部过滤 → 检查 IPv6、尝试常见高端口、确认目标存活
  • 信息收集饱和 → 整理已有信息，输出 recon_profile 并推进到下一阶段

Exit Evidence

  • Required: reconprofile, portscanresult, servicefingerprint
  • min_attempts: 4

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Security