Jamaalx

Attack Surface — Security skill for Claude Code

Security community

External attack-surface / recon audit of domains YOU OWN (your sites + subdomains, client sites under contract).

How to install Attack Surface

Installs to ~/.claude/skills/jamaalx-claude-skills-attack-surface/SKILL.md

Terminal

mkdir -p ~/.claude/skills/jamaalx-claude-skills-attack-surface && curl -fsSL https://raw.githubusercontent.com/Jamaalx/claude-skills/HEAD/commands/attack-surface.md -o ~/.claude/skills/jamaalx-claude-skills-attack-surface/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Attack Surface does

description: "External attack-surface / recon audit of domains YOU OWN (your sites + subdomains, client sites under contract). Passive + light active recon: DNS records, subdomain enumeration, TLS/cert health & expiry, HTTP security headers, CORS, exposed files (.env/.git/backups/source maps), open redirects, info leaks in headers, email auth (SPF/DKIM/DMARC), Cloudflare/WAF posture, leaked-credential & breach exposure. Non-destructive, owned-assets only. Generates ATTACK-SURFACE-FIXES.md."

Alternatives in Security

Audit Agents — Audit agent outputs from an orchestration run — timeline analysis, stall detection, active vs idle time breakd 117 ★
Talon — Penetration Testing MCP for Claude Code 58 ★
Openclaw Skill — ZettelForge v2.0.0 — CTI agentic memory system 58 ★