菜单
Chain recon tools into a repeatable, resumable pipeline for continuous bug-bounty coverage. Load on "automate recon", "recon pipeline", monitoring many programs, or scaling subdomain→ live→scan. Signals: wildcard scope at scale, wanting scheduled/continuous discovery.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/NoorQureshi/SploitAgent --skill automation-recon-pipeline命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
| name | automation-recon-pipeline |
| description | Chain recon tools into a repeatable, resumable pipeline for continuous bug-bounty coverage. Load on "automate recon", "recon pipeline", monitoring many programs, or scaling subdomain→ live→scan. Signals: wildcard scope at scale, wanting scheduled/continuous discovery. |
| domain | automation |
| type | technique |
| stability | learning |
| modes | ["bugbounty"] |
| severity | info |
| mitre | ["T1595"] |
| tools | ["subfinder","dnsx","httpx","naabu","nuclei","notify","anew"] |
| schema_version | 1 |
You track one or more wildcard programs and want discovery to run repeatably (and on a schedule), surfacing only new assets/findings instead of re-reviewing everything.
Recon is a directed flow: roots → subdomains → resolve → live → ports → nuclei. Wiring the
ProjectDiscovery tools together (each reads/writes lines) makes it composable, and diffing
against last run (anew) turns it into continuous monitoring that alerts on change.
subfinder -dL roots.txt -all -silent \
| dnsx -silent -a -resp-only \
| httpx -silent -sc -title -tech-detect \
| tee live.txt \
| nuclei -silent -severity low,medium,high,critical
anew subs.txt / anew live.txt so reruns
emit only newly-seen lines — the basis of continuous monitoring.notify (Slack/Discord/Telegram) so new hosts/findings alert you.nuclei -update-templates before each run.-rl, -c) and program automation rules — don't hammer.dnsx wildcard filtering) or you'll alert on noise forever.A rerun surfaces only newly-appeared assets/findings and notifies you — hands-off continuous coverage.
ProjectDiscovery pipeline docs; TomNomNom anew; nuclei templates.