zz-code-recon

Solid

Deep architectural context building for security audits. Use when conducting security reviews, building codebase understanding, mapping trust boundaries, or preparing for vulnerability analysis. Inspired by Trail of Bits methodology.

AI & Automation 126 stars 79 forks Updated 2 weeks ago Apache-2.0

Install

View on GitHub

Quality Score: 81/100

Stars 20%
70
Recency 20%
90
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# CodeRecon - Deep Architectural Context Building Build comprehensive architectural understanding through ultra-granular code analysis. Designed for security auditors, code reviewers, and developers who need to rapidly understand unfamiliar codebases before diving deep. ## Overview CodeRecon is a systematic approach to codebase reconnaissance that builds layered understanding from high-level architecture down to implementation details. Inspired by Trail of Bits' audit-context-building methodology. ### Why CodeRecon? Before you can find vulnerabilities, you need to understand: - How the system is architected - Where data flows - What the trust boundaries are - Where security-critical logic lives This skill provides a structured methodology for building that context efficiently. ## The Recon Pyramid ``` ┌─────────────┐ │ DETAILS │ ← Implementation specifics ─┼─────────────┼─ / │ FUNCTIONS │ ← Key function analysis / ─┼─────────────┼─ / │ MODULES │ ← Component relationships / ─┼─────────────┼─ / │ ARCHITECTURE│ ← System structure / ─┼─────────────┼─ / │ OVERVIEW │ ← High-level understanding ─────────┴─────────────┴───────── ``` Start broad, go deep systematically. ## Phase 1: Overview Reconnaissance ### 1.1 Project Identification Gather basic project inform...

Details

Author
sendaifun
Repository
sendaifun/skills
Created
7 months ago
Last Updated
2 weeks ago
Language
TypeScript
License
Apache-2.0

Bundled in these plugins

Similar Skills

Semantically similar based on skill content — not just same category