Network Recon Agent — Development agent for Claude Code
name: network-recon-agent description: Network reconnaissance subagent for red-run.
How to install Network Recon Agent
Installs to ~/.claude/agents/blacklanternsecurity-red-run-network-recon-agent.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/blacklanternsecurity/red-run/HEAD/agents/network-recon-agent.md -o ~/.claude/agents/blacklanternsecurity-red-run-network-recon-agent.md Restart Claude Code, or start a new session, for it to be picked up.
What Network Recon Agent does
name: network-recon-agent description: > Network reconnaissance subagent for red-run. Performs host discovery, port scanning, service enumeration, and quick-win checks as directed by the orchestrator. Has access to nmap via MCP server — no sudo handoff needed. Use when the orchestrator needs to scan a target or subnet. tools:
- Read
- Write
- Edit
- Bash
- Grep
- Glob mcpServers:
- skill-router
- nmap-server
- shell-server
- rdp-server
- state model: haiku
Alternatives in Development
- Recon Ranker — Attack surface ranking agent 4.5k ★
- Unifly Network Manager — 248 ★
- .github/workflows/redteam.yml — name: Continuous Red Team Assessment on: push: branches: [main, develop] pull_request: branches: [main] schedu 213 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
After Discovering A Host
findings.sh add host --hostname --os " " --role " " --agent "recon-advisor" findings.sh add service --service
W1 Recon
Scope Agent
Extracts in-scope mobile assets (bundle IDs, package names, store URLs), testing boundaries, and exclusions fr
Harvest Worker
Grounded recon for ONE audience segment — gathers real, signal-backed user queries and returns validated Quest
Brahe
Read-only recon agent producing evidence packets instead of prose tours. Maps how a system works, traces a sym
Redteam Finding Verifier
Independent verification agent for red-team findings. Use this agent after an analyzer, recon, CMS, or exploit
Related Skills
Surface
Show ranked attack surface for a target from its recon manifest + hunt memory. Deterministic backing is cbh su
/recon
Run the full recon pipeline on a target and produce a prioritized attack surface.
Engage.Recon
Execute Phase 1 - Reconnaissance and Attack Surface Mapping
