← All skills
cloud-recon
90 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By BitterSecurity/Decepticon (GitHub) · coding · 6,581 stars · scanned at commit bdb1016
Cloud infrastructure enumeration — AWS S3 buckets, Azure blob storage, GCP buckets, cloud metadata endpoints, IAM misconfigurations, CDN origin detection.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 13 places.
Show 10 more
- packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 88
dig <target>.elasticbeanstalk.com +short - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 102
for name in <target> <target>storage <target>data <target>backup \ - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 118
dig <target>.azurewebsites.net +short - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 149
for name in <target> <target>-bucket <target>-backup <target>-data \ - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 162
dig <project>.appspot.com +short - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 179
cloud_enum -k <target> -l cloud_enum_<target>.txt - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 188
TARGET="example" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 214
curl -sI -H "Host: <target>" https://<suspected_origin_ip>/ | head -20 - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 222
curl -s "https://<id>.lambda-url.<region>.on.aws/" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 234
curl -s "https://hub.docker.com/v2/repositories/<org>/" | python3 -m json.tool
Sends data to these websites: ip-ranges.amazonaws.com, $prefix.s3.amazonaws.com, assets.example.com, $name.blob.core.windows.net, dev.azure.com, storage.googleapis.com, $target.s3.amazonaws.com, $target.blob.core.windows.net, $target.firebaseio.com
The author does not mention this.
Found in 30 places.
Show 17 more
- packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 71
curl -s "https://<bucket>.s3.amazonaws.com/?list-type=2&max-keys=20" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 78
curl -s "https://assets.example.com/" | grep -i "NoSuchBucket" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 91
curl -sI "https://<target>" | grep -i "x-amz\|x-cache\|via.*cloudfront" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 94
curl -s "https://<api-id>.execute-api.<region>.amazonaws.com/prod/" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 104
code=$(curl -s -o /dev/null -w "%{http_code}" "https://$name.blob.core.windows.net/") - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 109
curl -s "https://<account>.blob.core.windows.net/<container>?restype=container&comp=list" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 112
curl -s "https://<account>.blob.core.windows.net/\$web/index.html" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 121
curl -s "https://<target>.azurewebsites.net/api/<function>" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 127
curl -s "https://dev.azure.com/<org>/_apis/projects?api-version=7.0" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 151
code=$(curl -s -o /dev/null -w "%{http_code}" "https://storage.googleapis.com/$name/") - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 156
curl -s "https://storage.googleapis.com/<bucket>/" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 168
curl -s "https://<region>-<project>.cloudfunctions.net/<function>" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 171
curl -s "https://<project>.firebaseio.com/.json" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 191
curl -s -o /dev/null -w "%{http_code} " "https://$TARGET.s3.amazonaws.com/" && echo "S3" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 194
curl -s -o /dev/null -w "%{http_code} " "https://$TARGET.blob.core.windows.net/" && echo "Blob" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 197
curl -s -o /dev/null -w "%{http_code} " "https://storage.googleapis.com/$TARGET/" && echo "GCS" - packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md, line 200
curl -s -o /dev/null -w "%{http_code} " "https://$TARGET.firebaseio.com/.json" && echo "Firebase"
and 10 more places
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'cloud-recon' ] || [ -L ~/.agents/skills/'cloud-recon' ]; then echo 'A skill folder named cloud-recon already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/BitterSecurity/Decepticon' "$d" && git -C "$d" checkout --quiet 'bdb1016c93ed687f61ac57481da298c25a47c8f5' -- 'packages/decepticon/decepticon/skills/standard/recon/cloud-recon' && mkdir -p ~/.agents/skills && cp -R "$d"/'packages/decepticon/decepticon/skills/standard/recon/cloud-recon' ~/.agents/skills/'cloud-recon' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'cloud-recon' ~/.claude/skills/'cloud-recon' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for BitterSecurity/Decepticon shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/BitterSecurity/Decepticon/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | bdb1016 | 90 |
| 2026-11-08 | df87955 | 90 |