web2-recon
Web2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau), directory fuzzing (ffuf), JS analysis (LinkFinder, SecretFinder), continuous monitoring (new subdomain alerts, JS change detection, GitHub commit watch). Use when starting recon on any web2 target or when asked about asset discovery, subdomain enum, or attack surface mapping.
86%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Critical
Do not install without reviewing
E004: Prompt injection detected in skill instructions.
What this means
Detected a prompt injection in the skill instructions. The skill contains hidden or deceptive instructions that fall outside its stated purpose and attempt to override the agent’s safety guidelines or intended behavior.
Why it was flagged
The document is an offensive web-recon and exploitation playbook that gives step-by-step instructions to enumerate assets, scan hosts, locate and harvest secrets (API keys/private keys), monitor commits/subdomains, and mass-exploit API specs — facilitating unauthorized access and secret exfiltration.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md’s required runtime workflow (the “STANDARD RECON PIPELINE” and “CONTINUOUS MONITORING” sections) ingests outsider-authored free text by crawling and scanning web content from a target plus reading GitHub commit metadata/content from external repos (e.g., commit file lists), which is not first-party trusted.
- Repository
elementalsouls/Claude-BugHunter
- Revision
7d10e74
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.