domain-recon

Passive reconnaissance for a domain, IP, or ASN using five keyless public APIs — no API keys, no accounts, no secrets. Everything is passive: the skill only queries public third-party databases; it never connects to or probes the target host directly.

Use this when the user wants to investigate a domain or IP's public footprint: enumerate subdomains, look up WHOIS/RDAP registration, resolve DNS records, geo- locate an IP, or identify which network/ASN owns an address.

All work runs through one Python helper (standard library only — no pip install):

python3 {baseDir}/scripts/recon.py <subcommand> <target> [options]

Output is JSON by default (easy to parse and chain); add --human for a compact readable summary.