web2-recon

SUSPICIOUS/HIGH-RISK skill. Its real footprint is an offensive security playbook for AI agents: recon, port scanning, secret hunting, source-code recovery, and techniques that directly enable exploitation. The install path is mostly normal developer tooling, but the capability scope exceeds simple asset discovery and gives the agent penetration-testing and credential-extraction instructions against external targets.