How does the skill handle sensitive data?

It follows a 'redact by default' policy, scrubbing secrets, API keys, and private data from logs, HAR files, screenshots, and final reports.

What is Recon Workbench?

Recon Workbench (rwb) is a CLI-first interrogation platform designed to produce evidence-backed findings under explicit authorization, using deterministic artifacts and validation.

Is authorization mandatory before running probes?

Yes. The skill follows a strict 'least privilege' and 'safety first' philosophy, requiring authorization artifacts and scope evidence before any target-specific interrogation begins.

What does 'evidence-only claims' mean?

It means every finding reported by the skill must cite a specific artifact path (like a log, trace, or dump) found in the run directory. Uncited claims are treated strictly as hypotheses.

Which target types can this skill interrogate?

The skill supports macOS applications, iOS simulators and devices, web applications, and open-source (OSS) repositories.

Recon Workbench

Name: Recon Workbench
Author: jscraik

byjscraik

•

セキュリティとテスト

Conducts authorized, evidence-backed security reconnaissance and system interrogation across macOS, iOS, web, and open-source targets.

Recon Workbench is a specialized CLI-driven interrogation platform designed for security professionals and developers to perform systematic, evidence-based reconnaissance. It enforces a strict 'evidence over inference' philosophy, requiring explicit authorization and producing deterministic artifacts for every finding. Whether analyzing macOS applications, iOS simulators, or web platforms, the skill guides users through a compliant workflow—from initial authorization and probe planning to automated execution and validated summary reporting—ensuring all claims are backed by verifiable data paths and rigorous validation gates.

主な機能

01Standardized probe sets for static inventory and dynamic analysis

02Deterministic artifact generation with SHA256 integrity verification

03Evidence-cited findings with mandatory artifact path linking

042 GitHub stars

05Automated multi-platform reconnaissance for macOS, iOS, Web, and OSS

06Strict authorization-first workflow ensuring compliant interrogation

ユースケース

01Systematic web application interrogation and behavioral mapping

02Evidence-based vulnerability research and reconnaissance on open-source repositories

03Security auditing and penetration testing of Apple ecosystem applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jscraik/agent-skills recon-workbench

For use in Claude.ai and ChatGPT

主な機能

01Standardized probe sets for static inventory and dynamic analysis

02Deterministic artifact generation with SHA256 integrity verification

03Evidence-cited findings with mandatory artifact path linking

042 GitHub stars

05Automated multi-platform reconnaissance for macOS, iOS, Web, and OSS

06Strict authorization-first workflow ensuring compliant interrogation

ユースケース

01Systematic web application interrogation and behavioral mapping

02Evidence-based vulnerability research and reconnaissance on open-source repositories

03Security auditing and penetration testing of Apple ecosystem applications