← All skills
active-recon
92 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By BitterSecurity/Decepticon (GitHub) · coding · 6,581 stars · scanned at commit bdb1016
Active target probing — port scanning, service detection, vulnerability scanning, banner grabbing, web directory fuzzing, SSL/TLS analysis.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 26 places.
Show 17 more
- packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 108
nmap -sV -p 80,443 <target> -oN scan.txt -oX scan.xml -oG scan.gnmap - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 120
nmap --script http-methods -p 80,443 <target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 138
nmap --script ssh2-enum-algos -p 22 <target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 145
nmap --script dns-nsid -p 53 <target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 151
nmap --script smtp-commands -p 25,587 <target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 157
nmap --script smb-enum-shares,smb-enum-users,smb-os-discovery -p 445 <target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 163
nmap -sU --script snmp-info,snmp-interfaces,snmp-processes -p 161 <target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 171
ffuf -u https://<target>/FUZZ -w /usr/share/wordlists/dirb/common.txt -mc 200,301,302,403 - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 188
gobuster dir -u https://<target> -w /usr/share/wordlists/dirb/common.txt -o gobuster_<target>.txt - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 197
nuclei -u https://<target> -severity critical,high -o nuclei_<target>.txt - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 216
nikto -h https://<target> -o nikto_<target>.txt - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 228
testssl.sh https://<target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 248
echo "" | nc -nv -w 3 <target_ip> <port> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 260
curl -sI -L https://<target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 271
nmap --script ldap-rootdse -p 389 <target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 281
nmap --script krb5-enum-users --script-args krb5-enum-users.realm='DOMAIN.COM' -p 88 <target> - packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md, line 286
nmap --script rdp-enum-encryption,rdp-ntlm-info -p 3389 <target>
and 6 more places
Connects to the internet
This is disclosed by the author in the skill's SKILL.md or README.
Found in 4 places.
Show 1 more
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'active-recon' ] || [ -L ~/.agents/skills/'active-recon' ]; then echo 'A skill folder named active-recon already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/BitterSecurity/Decepticon' "$d" && git -C "$d" checkout --quiet 'bdb1016c93ed687f61ac57481da298c25a47c8f5' -- 'packages/decepticon/decepticon/skills/standard/recon/active-recon' && mkdir -p ~/.agents/skills && cp -R "$d"/'packages/decepticon/decepticon/skills/standard/recon/active-recon' ~/.agents/skills/'active-recon' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'active-recon' ~/.claude/skills/'active-recon' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for BitterSecurity/Decepticon shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/BitterSecurity/Decepticon/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | bdb1016 | 92 |
| 2026-11-08 | df87955 | 92 |