Recon Quick

Fast OSINT and reconnaissance presets using bbot and nmap. One-command subdomain enumeration, port scanning, and web fingerprinting for bug bounty recon.

This skill appears to do what it says: it orchestrates local calls to bbot and nmap and writes results into the specified output folder. Before installing/using it: 1) Ensure you have authorization to scan the target — network scanning can be illegal or against policy. 2) Installing 'bbot' via pipx installs code from PyPI; review the bbot package (or use a pinned version) if you need stronger supply-chain assurance. 3) The script runs subprocesses (bbot, nmap) which will make network requests to targets; no hidden exfiltration was found. 4) Note a few CLI flags in SKILL.md (e.g., --proxy, --wordlist) are present but not fully wired in the script — this is a functional issue, not a security one. If you want higher confidence, inspect the bbot package source and run the script in a controlled environment first.

Type: OpenClaw Skill Name: recon-quick Version: 1.0.0 The 'recon-quick' skill is a legitimate utility for performing OSINT and network reconnaissance using established tools like `bbot` and `nmap`. The implementation in `scripts/recon.py` follows safe practices by using list-based `subprocess.run` calls and lacks any evidence of malicious behavior, such as data exfiltration, unauthorized access, or persistence mechanisms. Its functionality is entirely consistent with its stated purpose of automating bug bounty recon tasks.