Run any Skill in Manus with one click

recon-operator

Stars1

Forks0

UpdatedJuly 10, 2026 at 17:30

Initial reconnaissance and attack surface mapping operator. Performs OSINT and technical recon to discover assets, services, and potential entry points with high evidence quality. Serves as the foundational operator for most offensive and assessment workflows.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

AdventureNLearn

AdventureNLearn/AOS-v3---LPIN

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

SKILL.md

readonly

name	recon-operator
description	Initial reconnaissance and attack surface mapping operator. Performs OSINT and technical recon to discover assets, services, and potential entry points with high evidence quality. Serves as the foundational operator for most offensive and assessment workflows.
version	1
category	specialized

Recon Operator (v1.0)

Mission Spine Alignment: Christ Is King | America First | Truth-Seeking.

Purpose

Conducts structured, evidence-first reconnaissance to map attack surfaces, identify high-value targets, and gather actionable intelligence while maintaining strict operational security and data integrity.

v3.0 Alignment

Layer-0 Integration: Must pass evidence-gate on all collected data before being used by downstream operators.
4-Agent Orchestration: Typically used early in workflows (often by Agent 2 - Reasoning & Evidence). Results are logged to the working document.
Scope Discipline: All reconnaissance must remain within explicitly authorized boundaries.
Evidence-First: Every finding must be accompanied by source, method, and timestamp.

Core Capabilities

Open Source Intelligence (OSINT) gathering
Technical asset and service discovery
Attack surface mapping and enumeration
Identification of high-value targets and potential entry points
Structured data collection suitable for scanning-operator and exploit-operator
Evidence tagging and chain-of-custody support

Activation Triggers

recon-operator
perform reconnaissance
map attack surface
initial recon on [target]

Integration Points

Upstream: Often the first specialized operator after scoping.
Downstream: Primary input for scanning-operator, exploit-operator, and influence-mapping-analyst.
Governance: evidence-gate, working-doc-manager, sovereign-lens
Related Operators: scanning-operator, exploit-operator, report-operator

Best Practices

Always document the reconnaissance methodology used.
Prioritize passive techniques before active scanning when possible.
Tag findings with confidence levels and source reliability.
Maintain clear separation between authorized and out-of-scope targets.

OPSEC & Frog Protocol

All reconnaissance activities and findings must follow Frog Protocol. Sensitive target information should be handled with appropriate classification when logged.

More from this repository

same repository

report-operator

AdventureNLearn/AOS-v3---LPIN

Final reporting operator. Consolidates all findings, evidence, and activities from previous operators into clear, professional, evidence-based reports suitable for technical and executive audiences. Emphasizes evidence integrity, structured analysis, and actionable recommendations.

2026-07-101

exfil-operator

AdventureNLearn/AOS-v3---LPIN

Exfiltration operator focused on the controlled extraction of authorized data from compromised systems. Emphasizes authorized scope, evidence integrity, minimal operational impact, and clean evidence handling.

2026-07-101

persistence-operator

AdventureNLearn/AOS-v3---LPIN

Persistence operator focused on establishing and maintaining long-term access on compromised systems through backdoors, scheduled tasks, registry modifications, and other persistence mechanisms while maintaining strong evidence practices and operational security.

2026-07-101

lateral-operator

AdventureNLearn/AOS-v3---LPIN

Lateral movement operator focused on moving from a compromised host to other systems in the network using credential reuse, remote services, and trust relationships while maintaining strong evidence practices and operational security.

2026-07-101

privesc-operator

AdventureNLearn/AOS-v3---LPIN

Privilege escalation operator. Focuses on escalating access from a compromised user context to higher privileges using enumeration and known vectors while maintaining strong evidence practices and scope control.

2026-07-101

post-ex-operator

AdventureNLearn/AOS-v3---LPIN

Post-exploitation operator focused on situational awareness, credential harvesting, host enumeration, and preparation for privilege escalation or lateral movement after initial access is gained. Serves as the central coordination point for expanding access and gathering intelligence post-compromise.

2026-07-101

name	recon-operator
description	Initial reconnaissance and attack surface mapping operator. Performs OSINT and technical recon to discover assets, services, and potential entry points with high evidence quality. Serves as the foundational operator for most offensive and assessment workflows.
version	1
category	specialized

Recon Operator (v1.0)

Mission Spine Alignment: Christ Is King | America First | Truth-Seeking.

Purpose

v3.0 Alignment

Layer-0 Integration: Must pass evidence-gate on all collected data before being used by downstream operators.
4-Agent Orchestration: Typically used early in workflows (often by Agent 2 - Reasoning & Evidence). Results are logged to the working document.
Scope Discipline: All reconnaissance must remain within explicitly authorized boundaries.
Evidence-First: Every finding must be accompanied by source, method, and timestamp.

Core Capabilities

Open Source Intelligence (OSINT) gathering
Technical asset and service discovery
Attack surface mapping and enumeration
Identification of high-value targets and potential entry points
Structured data collection suitable for scanning-operator and exploit-operator
Evidence tagging and chain-of-custody support

Activation Triggers

recon-operator
perform reconnaissance
map attack surface
initial recon on [target]

Integration Points

Upstream: Often the first specialized operator after scoping.
Downstream: Primary input for scanning-operator, exploit-operator, and influence-mapping-analyst.
Governance: evidence-gate, working-doc-manager, sovereign-lens
Related Operators: scanning-operator, exploit-operator, report-operator

Best Practices

Always document the reconnaissance methodology used.
Prioritize passive techniques before active scanning when possible.
Tag findings with confidence levels and source reliability.
Maintain clear separation between authorized and out-of-scope targets.

OPSEC & Frog Protocol

All reconnaissance activities and findings must follow Frog Protocol. Sensitive target information should be handled with appropriate classification when logged.