技能 reconnaissance-knowledge

📦

reconnaissance-knowledge

Name: reconnaissance-knowledge
Author: CharlesKozel

內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

對應偵察工作流程

安全團隊需要結構化方式來盤點已授權目標。此技能會為受控評估整理偵察階段、證據擷取與報告流程。

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "reconnaissance-knowledge" from https://skillstore.io/skills/charleskozel-reconnaissance-knowledge.md and its manifest at https://skillstore.io/api/skills/charleskozel-reconnaissance-knowledge/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/charleskozel-reconnaissance-knowledge.md 已簽名 manifest GET /api/skills/charleskozel-reconnaissance-knowledge/manifest 已簽名 lockfile GET /api/skills/charleskozel-reconnaissance-knowledge/lockfile

測試它

正在使用「reconnaissance-knowledge」。目標開放 SSH 和 HTTP 服務，且 Web 平台版本過舊。

預期結果:

結果會區分服務清單、觀察到的技術、證據品質，以及給評估負責人的後續問題。

正在使用「reconnaissance-knowledge」。 Web 掃描發現 admin 路徑、uploads 路徑與多個重新導向。

預期結果:

結果會依狀態將路徑分組，記錄潛在業務影響，並列出供授權審閱使用的安全驗證步驟。

正在使用「reconnaissance-knowledge」。團隊在進行更深入測試前，需要最終偵察交接資料。

預期結果:

結果會摘要已發現的服務、值得注意的風險、未解問題，以及下一階段的核准關卡。

安全審計

高風險

v9 • 2026/7/6 開啟版本化報告

The Markdown command-format detections are mostly false positives for code formatting, but the blocker findings are confirmed. The skill provides actionable network reconnaissance workflows, stealth scanning advice, default credential probing, and exploitation handoff guidance.

已掃描檔案

324

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (19)

高

SKILL.md:57-58

Network reconnaissance

- Goal: Find information that standard tools miss

The surrounding layer framework explicitly directs users to discover target information through escalating reconnaissance. This is active network reconnaissance guidance.

高

SKILL.md:14

Network scanning tools

- `nmap` - Port and service discovery

The skill recommends network enumeration tools as available tooling for reconnaissance. Even as documentation, it can guide an agent to perform active scanning against a target.

高

SKILL.md:15

Network scanning tools

- `masscan` - Fast port scanning (if speed needed)

The skill recommends network enumeration tools as available tooling for reconnaissance. Even as documentation, it can guide an agent to perform active scanning against a target.

高

SKILL.md:26

Network scanning tools

- `enum4linux` - SMB/Samba enumeration

The skill recommends network enumeration tools as available tooling for reconnaissance. Even as documentation, it can guide an agent to perform active scanning against a target.

高

SKILL.md:47

Network scanning tools

- Example: nmap top 1000 ports, gobuster with small wordlist

The strategy examples call for nmap and gobuster scanning at increasing depth. This is actionable reconnaissance workflow guidance.

高

SKILL.md:53

Network scanning tools

- Example: nmap all ports + version detection, gobuster with large wordlist

The strategy examples call for nmap and gobuster scanning at increasing depth. This is actionable reconnaissance workflow guidance.

高

SKILL.md:76

Network scanning tools

nmap -p- --min-rate=1000 -T4 TARGET

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

高

SKILL.md:79

Network scanning tools

nmap -p- -T4 TARGET -oN ports.txt

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

顯示全部 19 條已確認問題

高

SKILL.md:97

Network scanning tools

nmap -p22,80,443 -sV -sC -A TARGET -oN services.txt

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

高

SKILL.md:100

Network scanning tools

nmap -p22,80 -sC -sV --script=default,vuln TARGET

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

高

SKILL.md:185

Network scanning tools

enum4linux -a TARGET

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

高

SKILL.md:229

Network scanning tools

# Example: Parse nmap output to JSON

The line introduces parsing nmap scan output into structured data. It supports the surrounding active scanning workflow and is part of the reconnaissance procedure.

高

SKILL.md:230

Network scanning tools

nmap -p- TARGET -oG - | grep "Ports:" | awk '{print $2, $4}' | sed 's/\/open//' | jq -R -s 'split("\

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

高

SKILL.md:240

Network scanning tools

nmap ... -oN nmap-full.txt -oX nmap-full.xml

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

高

SKILL.md:248

Network scanning tools

- UDP ports (slower but important): `nmap -sU --top-ports 100 TARGET`

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

高

SKILL.md:249

Network scanning tools

- All TCP ports: `nmap -p- TARGET`

The line provides an actionable network scanning command or scanning output workflow. These instructions could be used for unauthorized reconnaissance if scope is not enforced.

高

SKILL.md:233-235

Stealth Scanning Guidance

The skill advises slower stealthy scans for real environments, which can help evade detection during unauthorized reconnaissance.

Lines 233-235 explicitly contrast speed with stealth and recommend stealthy scan timing for real environments.

高

SKILL.md:218-220 SKILL.md:247-251 SKILL.md:316-320

Credential Probing Guidance

The skill directs users to test default credentials and collect discovered credentials, which can enable unauthorized access attempts.

The cited lines instruct default credential testing and include discovered credentials in handoff material.

高

SKILL.md:292-303 SKILL.md:314-323

Exploitation Phase Handoff

The skill asks for recommended exploitation approaches and says to proceed to exploitation after reconnaissance is sufficient.

The handoff template requests exploitation recommendations, and the closing instruction explicitly moves into an exploitation phase.

風險因素

⚙️ 外部命令 (49)

🌐 網路存取 (11)

SKILL.md:130 SKILL.md:134 SKILL.md:139 SKILL.md:142 SKILL.md:145 SKILL.md:148 SKILL.md:151 SKILL.md:154 SKILL.md:161 SKILL.md:161 SKILL.md:280

📁 檔案系統存取 (1)

SKILL.md:100

偵測到的模式

Network reconnaissanceNetwork scanning tools×15

審計單位: codex 檢視審計紀錄 →

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/charleskozel-reconnaissance-knowledge/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/charleskozel-reconnaissance-knowledge/security.svg)](https://skillstore.io/skills/charleskozel-reconnaissance-knowledge?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/charleskozel-reconnaissance-knowledge?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/charleskozel-reconnaissance-knowledge/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/charleskozel-reconnaissance-knowledge.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

CharlesKozel. (2026). reconnaissance-knowledge security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/charleskozel-reconnaissance-knowledge/audits/9

BibTeX 引用

@techreport{charleskozel-charleskozel-reconnaissance-knowledge-2026,
  author = {CharlesKozel},
  title = {reconnaissance-knowledge security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/charleskozel-reconnaissance-knowledge/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "reconnaissance-knowledge security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "CharlesKozel"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/charleskozel-reconnaissance-knowledge/audits/9"
identifiers:
  - type: other
    value: "skillstore:charleskozel-reconnaissance-knowledge:audit:9"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

規劃授權實驗室偵察流程

在進行更深入測試前，為訓練場域或受控目標建立分階段檢查清單。

標準化服務清單筆記

將零散的偵察觀察結果轉換為一致的清單，以供團隊審閱。

準備評估交接資料

為授權專案摘要已發現的服務、技術與潛在後續追蹤領域。

試試這些提示

建立偵察檢查清單

為授權實驗室目標建立安全的偵察檢查清單。包含階段、要擷取的證據與停止條件。

整理服務發現結果

將這些授權偵察筆記整理為連接埠、服務、版本、Web 技術與未決問題。

選擇下一步列舉步驟

根據這份授權服務清單，建議有界限的下一步列舉步驟，並說明每個步驟的目的。

草擬偵察交接文件

為授權評估草擬一份精簡的偵察交接文件。包含證據、信心程度、風險，以及後續測試前所需的核准。

最佳實務

僅在明確書面授權與已定義範圍內使用此技能。
針對每項發現記錄證據、時間戳記、假設與目標識別碼。
優先使用有界限的檢查，當結果暗示影響可能超出核准範圍時即停止。

避免

未取得書面許可時，不要掃描公開或第三方網路。
不要使用隱匿指引來規避監控或隱藏活動。
在未經核准驗證前，不要將建議的弱點視為已確認。

常見問題

此技能會自行執行掃描嗎？

不會。它是一個知識庫，但包含代理程式或使用者可能執行的命令。

這對正式環境網路安全嗎？

只有在取得網路擁有者明確授權、範圍、時程與速率限制時才安全。

它可以確認弱點嗎？

不能。它協助整理偵察結果，並識別可能需要核准驗證的領域。

為什麼 marketplace 對此技能的審查很嚴格？

此技能教授網路掃描、服務列舉、預設憑證檢查與利用交接規劃。

它討論哪些工具？

它討論 nmap、masscan、gobuster、nikto、enum4linux 與 DNS utilities 等工具。

預期使用者是誰？

預期使用者是在授權實驗室或受控評估中工作的安全從業人員。

開發者詳細資訊

作者

CharlesKozel

授權

MIT

Skillstore 修訂

版本提示

作者未聲明版本。

儲存庫

https://github.com/CharlesKozel/Pentest-Agent-Evalulator/tree/main/agents/claude-tbug/skills/recon

引用

dd4a3ef9f20ddf38830950b4bb713df96b431fd6

維護新鮮度

2026/7/18

使用量

6 次下載 · 275 次瀏覽

檔案結構

📄 SKILL.md