Recon

Handles network reconnaissance for bug bounty and security work. Does subdomain enumeration, port scanning, DNS/WHOIS lookups, and maps out infrastructure across domains, IPs, netblocks, and ASNs. Smart about passive versus active modes: passive stuff like certificate transparency and DNS records runs without authorization, but anything that touches the target (port scans, service detection) requires explicit confirmation. Integrates IPInfo API for geolocation and ASN data. Works well in the chain where OSINT identifies companies and this maps their technical infrastructure, then hands off discovered web apps to assessment tools. The authorization checks are thorough, which matters when you're doing authorized pentests or bounty work.

Install to Claude Code

npx -y skills add danielmiessler/personal_ai_infrastructure --skill Recon --agent claude-code