Repository
uphiago/recon-skills agent skills
- skills
- 23
- GitHub stars
- 1.3k
GitHub description: “Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh”
- Stars
- 1,293 (218 forks)
- Licence
- MIT
- Last push
- Sep 2026
- Created
- Jun 2026
- Homepage
- hiago.sh
- bug-bounty
- cloud-security
- firebase-hacking
- hermes-agent
- jwt-attacks
- offensive-security
- penetration-testing
- reconnaissance
- red-team
- security-automation
- ssrf
- subdomain-enumeration
- supabase
- wordpress-security
- cors-exploitation
Install all skills
npx skills add uphiago/recon-skillsAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in uphiago/recon-skills, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Flags API endpoints whose data or actions look like they should need a login but currently don't, as part of authorized security testing. | uphiago/ | 1.3k | — | ~2k | Automated safety check: Pass | MIT | 1 mo ago |
| 2 | Mine errorlog for creds, paths, SQL when leak hunt finds. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~3.3k | Automated safety check: Pass | MIT | 1 mo ago |
| 3 | Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints | uphiago/ | 1.3k | — | ~2.6k | Automated safety check: Pass | MIT | 1 mo ago |
| 4 | A skill your agent uses when starting or restructuring an authorized external web and API assessment. | uphiago/ | 1.3k | — | ~1.9k | Automated safety check: Pass | MIT | 1 mo ago |
| 5 | Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect | uphiago/ | 1.3k | — | ~2.8k | Automated safety check: Notes | MIT | 1 mo ago |
| 6 | A skill your agent uses when protected HTTP routes return 401 or 403. | uphiago/ | 1.3k | — | ~3.1k | Automated safety check: Pass | MIT | 1 mo ago |
| 7 | Map organization IP infrastructure via ASN, CIDR, TLD expansion, and reverse DNS. | uphiago/ | 1.3k | — | ~1.6k | Automated safety check: Pass | MIT | 1 mo ago |
| 8 | Identify CMS, frameworks, and server technology stacks on live hosts. | uphiago/ | 1.3k | — | ~2k | Automated safety check: Pass | MIT | 1 mo ago |
| 9 | Exchange/OWA NTLM AD leak, spray attack when mail subdomain. | uphiago/ | 1.3k | — | ~2.6k | Automated safety check: Pass | MIT | 1 mo ago |
| 10 | High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated | uphiago/ | 1.3k | — | ~1.1k | Automated safety check: Notes | MIT | 1 mo ago |
| 11 | Spoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile. | uphiago/ | 1.3k | — | ~2.4k | Automated safety check: Pass | MIT | 1 mo ago |
| 12 | Human-like mouse, keyboard and scroll behavior for behavioral bot bypass. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 13 | Attack cameras via RTSP, ONVIF, Axis config when 554 open. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~2.3k | Automated safety check: Pass | MIT | 1 mo ago |
| 14 | Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs. | uphiago/ | 1.3k | — | ~1.7k | Automated safety check: Pass | MIT | 1 mo ago |
| 15 | Mass scan for exposed env files, backups, and git configs. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Notes | MIT | 1 mo ago |
| 16 | Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 17 | Map subdomains via crt.sh and subfinder at recon kickoff. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~3.3k | Automated safety check: Pass | MIT | 1 mo ago |
| 18 | Detect and verify subdomain takeover via dangling CNAME to unclaimed services. | uphiago/ | 1.3k | — | ~1.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 19 | Spoof TLS ClientHello and JA4 fingerprints for browser impersonation. | uphiago/ | 1.3k | — | ~2.1k | Automated safety check: Pass | MIT | 1 mo ago |
| 20 | Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing. | uphiago/ | 1.3k | — | ~1.4k | Automated safety check: Notes | MIT | 1 mo ago |
| 21 | 21.Visual Recon Screenshot all live hosts for rapid visual triage and technology fingerprinting. | uphiago/ | 1.3k | — | ~1.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 22 | Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 23 | Find leaked API keys, tokens, and credentials in public GitHub repositories. | uphiago/ | 1.3k | — | ~1.8k | Automated safety check: Warn | MIT | 1 mo ago |
Questions, answered from the data.
What is the best skill in uphiago/recon-skills?
Unauthenticated API Endpoint Recon from uphiago/recon-skills ranks first of the 23 skills in uphiago/recon-skills listed here, with the highest score: its repository has 1.3k GitHub stars, its SKILL.md loads about 2k tokens and it passes the automated safety check with no findings. Next come Error Log Mining and JS Secrets Extraction.
Are the skills in uphiago/recon-skills official?
None yet. All 23 skills in uphiago/recon-skills listed here come from community repositories; a skill counts as official when the product's own GitHub organization publishes it.
How do I install all skills from uphiago/recon-skills?
Run npx skills add uphiago/recon-skills in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.