recon-subdomain

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Script scripts/filter_resolved.py invokes the external utility dnsx via subprocess.run to perform DNS resolution on discovered subdomains.
  • [EXTERNAL_DOWNLOADS]: The documentation recommends the installation of several well-known reconnaissance tools (such as subfinder, amass, and dnsx) from their official GitHub repositories.
  • [COMMAND_EXECUTION]: The SKILL.md file contains numerous CLI examples for orchestrating subdomain enumeration workflows using various third-party tools.
  • [COMMAND_EXECUTION]: Reconnaissance techniques described include querying public certificate transparency logs from services like crt.sh and censys.io, which are established practices for DNS discovery.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 07:51 AM