recon-playbook
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses curl to fetch certificate transparency logs from crt.sh, which is a widely recognized and legitimate service for domain reconnaissance.
- [COMMAND_EXECUTION]: The workflow provides instructions for using established open-source security tools, such as subfinder, dnsx, httpx, and katana, to identify legitimate assets and services.
- [SAFE]: The skill outlines a standard methodology for authorized security testing that includes explicit steps for scope verification, rate limiting, and evidence preservation.
Audit Metadata