fofamap

Overview

This skill turns natural-language recon requests into a stable FOFA workflow:

pick the right FOFA operation,
detect the FOFA membership tier and capability profile,
run deterministic API calls through scripts/fofa_recon.py,
broaden the search when FOFA returns no useful data,
verify live web reachability when it matters,
track inventory drift with snapshot comparisons when the task is recurring,
export clean handoff files when the user needs deliverables,
summarize findings with clear caveats and next steps,
learn from prior runs so the next query, report, and handoff improve.

This skill is distilled from the FofaMap project, but packaged for skill use instead of an interactive application. The host agent should do the reasoning, and the helper script should do the FOFA API work. The workflow keeps the project's key tactics: action routing, permission-aware field selection, zero-result reflection, live reachability verification, export-oriented delivery, and targeted follow-up suggestions. It now also keeps a bounded local memory so the skill can reflect on failed runs, recurring friction, and strong report patterns without turning into an uncontrolled self-modifying black box.

For setup, the user only needs to provide FOFA credentials: