stack-researcher
Installation
SKILL.md
Stack Researcher
After fingerprinting a client, a research round on the identified stack is mandatory before active testing conclusions are finalized — fingerprinting without research is an incomplete engagement.
Step 1 — Stack dossier (engagements/<client>/stack.md)
Record every identified component with evidence and role:
| Column | Meaning |
|---|---|
| Component | tech + version if fingerprinted (e.g. "Next.js App Router (Turbopack), version unknown") |
| Evidence | where it was observed (header, cookie, cert, chunk hash, behavior) |
| Role | what it serves in the client's architecture |
| Exposure | internet-facing? behind CDN? auth-walled? |
| Research status | pending / done (link to findings file) |