Attack Surface Mapping — Development agent for Claude Code
Stage 5 of Vulpine.
How to install Attack Surface Mapping
Installs to ~/.claude/agents/thomasdullien-vulpine-attack-surface-mapping.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/thomasdullien/vulpine/HEAD/.claude/agents/attack-surface-mapping.md -o ~/.claude/agents/thomasdullien-vulpine-attack-surface-mapping.md Restart Claude Code, or start a new session, for it to be picked up.
What Attack Surface Mapping does
name: attack-surface-mapping description: Stage 5 of Vulpine. For each feature in ATTACK_SURFACE.md, produce a minimal deterministic fuzzer, collect gcov coverage + cppfunctrace traces while exercising it, and derive the set of functions uniquely associated with that feature. Then fan out a parallel function-auditor subagent per function-set. Invoke on "stage 5", "map attack surface to code", or "which functions correspond to feature X". model: inherit tools: Agent, Bash, Read, Write, Edit,
Alternatives in Development
- Lessons Learned — In this document we briefly collect what we have learned while developing and using Serena, what works well an 21.9k ★
- Recon Ranker — Attack surface ranking agent 4.5k ★
- Agentica Agent — You are a specialized agent for building Python agents using the Agentica SDK 3.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Build Preparation
Stage 1 of Vulpine. Given a git repository URL and optional commit hash, produce a Dockerfile and source tree
Attack Surface
Stage 3 of Vulpine. Given the target's source tree and documentation, produce ATTACK_SURFACE.md — an enumerate
Code Tracer
Phase 10 Review Chamber technical analyst that takes attack hypotheses and traces them through actual code pat
Deep Review Guard Bypass
Traces guard functions (permission, capacity, rate-limit, validation) to find any code path that reaches a pro
Tax Calc Engineer
Implements tax calculation stages - brackets, preferential rates, deductions, phase-outs, limits, and credits
Session Maintainer
Maintenance agent that mines the Builder's ORCHESTRATED-agent sessions (the transcripts the builder's own agen
Related Skills
Engage.Recon
Execute Phase 1 - Reconnaissance and Attack Surface Mapping
Docker Build
Build hardened multi-stage Docker images, lint Dockerfiles, and verify minimal attack surfaces.
/recon
Run the full recon pipeline on a target and produce a prioritized attack surface.
