菜单
Initial reconnaissance and attack surface mapping operator. Performs OSINT and technical recon to discover assets, services, and potential entry points with high evidence quality. Serves as the foundational operator for most offensive and assessment workflows.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Final reporting operator. Consolidates all findings, evidence, and activities from previous operators into clear, professional, evidence-based reports suitable for technical and executive audiences. Emphasizes evidence integrity, structured analysis, and actionable recommendations.
Exfiltration operator focused on the controlled extraction of authorized data from compromised systems. Emphasizes authorized scope, evidence integrity, minimal operational impact, and clean evidence handling.
Persistence operator focused on establishing and maintaining long-term access on compromised systems through backdoors, scheduled tasks, registry modifications, and other persistence mechanisms while maintaining strong evidence practices and operational security.
Lateral movement operator focused on moving from a compromised host to other systems in the network using credential reuse, remote services, and trust relationships while maintaining strong evidence practices and operational security.
Privilege escalation operator. Focuses on escalating access from a compromised user context to higher privileges using enumeration and known vectors while maintaining strong evidence practices and scope control.
Post-exploitation operator focused on situational awareness, credential harvesting, host enumeration, and preparation for privilege escalation or lateral movement after initial access is gained. Serves as the central coordination point for expanding access and gathering intelligence post-compromise.
| name | recon-operator |
| description | Initial reconnaissance and attack surface mapping operator. Performs OSINT and technical recon to discover assets, services, and potential entry points with high evidence quality. Serves as the foundational operator for most offensive and assessment workflows. |
| version | 1 |
| category | specialized |
Mission Spine Alignment: Christ Is King | America First | Truth-Seeking.
Conducts structured, evidence-first reconnaissance to map attack surfaces, identify high-value targets, and gather actionable intelligence while maintaining strict operational security and data integrity.
evidence-gate on all collected data before being used by downstream operators.scanning-operator and exploit-operatorrecon-operatorperform reconnaissancemap attack surfaceinitial recon on [target]scanning-operator, exploit-operator, and influence-mapping-analyst.evidence-gate, working-doc-manager, sovereign-lensscanning-operator, exploit-operator, report-operatorAll reconnaissance activities and findings must follow Frog Protocol. Sensitive target information should be handled with appropriate classification when logged.