Summary
Automates discovery and extraction of exposed version control directories and backup files during authorized security assessments. Walks you through probing .git, .svn, .hg, and .bzr endpoints, distinguishing between 403s that confirm presence versus 404s, then points you to the right recovery tool (git-dumper, GitTools, svn-extractor) based on what you find. Also covers .DS_Store parsing and common backup artifacts like .env files and .swp leftovers. The decision tree is practical: try .git/HEAD first, check the response pattern, route to the appropriate dumper. Treats 403-on-directory plus 200-on-specific-files as high priority, which is the right call since misconfigured deny rules often leak exactly that way.
Install to Claude Code
npx -y skills add yaklang/hack-skills --skill insecure-source-code-management --agent claude-codeInstalls into .claude/skills of the current project.
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →
Files
SKILL.md
Select a file.
Featured
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →First SeenMay 16, 2026
