Is the Reconnaissance & OSINT Automation skill free?

Yes. The skill itself is free from Masriyan/Claude-Code-CyberSecurity-Skill. SkillProof publishes the install command and an independent test verdict at no cost.

What is the Reconnaissance & OSINT Automation SkillProof Score?

8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 4/5.

How do I install Reconnaissance & OSINT Automation?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use Reconnaissance & OSINT Automation with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

Reconnaissance & OSINT Automation

Working DNS/subdomain/tech-fingerprint recon scripts for authorized assessments

by Masriyan · Masriyan/Claude-Code-CyberSecurity-Skill

Tested · Works

Install — copy the command Download source ↗

Test report

Verdict: Tested · Works
Score: 8.8/10
Tested: Jul 17, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 10, 2026 · f4be7d6

Ran all three bundled scripts live against example.com: dns_recon correctly parsed SPF -all, DMARC p=reject and DKIM, and detected the Cloudflare nameservers refusing AXFR zone transfer; tech_fingerprint identified Cloudflare WAF/CDN and listed five missing security headers (HSTS, CSP, X-Frame-Options...). That structured, accurate JSON clearly beats a manual dig/curl baseline. The v3.0 'enhancements' (subdomain takeover, cloud-bucket enum, JA4) are prose guidance only with no code, and crt.sh timed out during passive enum though the script degraded gracefully.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 8/10
Docs & honesty 4/5

What Reconnaissance & OSINT Automation does

Passive and active reconnaissance for authorized security assessments: subdomain enumeration via CT logs, DNS analysis with zone-transfer and email-security checks, and technology fingerprinting. Ships three Python scripts and triggers on recon, OSINT, subdomain, and DNS requests.

How to install Reconnaissance & OSINT Automation

git clone https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill
mkdir -p ~/.claude/skills
cd Claude-Code-CyberSecurity-Skill && cp -r skills/01-recon-osint ~/.claude/skills/reconnaissance-osint-automation

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Reconnaissance & OSINT Automation

/reconnaissance-osint-automation Working DNS/subdomain/tech-fingerprint recon scripts for authorized assessments

It also activates on plain-language prompts like these:

Run DNS recon on our domain and check the SPF and DMARC records
Enumerate subdomains for this target using certificate transparency logs
Fingerprint the tech stack and list missing security headers on our site

Frequently asked questions

Is the Reconnaissance & OSINT Automation skill free?: Yes. The skill itself is free from Masriyan/Claude-Code-CyberSecurity-Skill. SkillProof publishes the install command and an independent test verdict at no cost.
Does Reconnaissance & OSINT Automation work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 17, 2026. Verdict: Tested · Works. Ran all three bundled scripts live against example.com: dns_recon correctly parsed SPF -all, DMARC p=reject and DKIM, and detected the Cloudflare nameservers refusing AXFR zone transfer; tech_fingerprint identified Cloudflare WAF/CDN and listed five missing security headers (HSTS, CSP, X-Frame-Options...). That structured, accurate JSON clearly beats a manual dig/curl baseline. The v3.0 'enhancements' (subdomain takeover, cloud-bucket enum, JA4) are prose guidance only with no code, and crt.sh timed out during passive enum though the script degraded gracefully.
What is the Reconnaissance & OSINT Automation SkillProof Score?: 8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 4/5.
How do I install Reconnaissance & OSINT Automation?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Reconnaissance & OSINT Automation with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.