Analyze Attack Surface — Development skill for Claude Code
Analyze the attack surface to identify exposed components, entry points, and potential attack vectors.
How to install Analyze Attack Surface
Installs to ~/.claude/commands/kalese0237-claude-skills-analyze-attack-surface.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/kalese0237/claude-skills/HEAD/.claude/commands/analyze-attack-surface.md -o ~/.claude/commands/kalese0237-claude-skills-analyze-attack-surface.md Restart Claude Code, or start a new session, for it to be picked up.
What Analyze Attack Surface does
description: Analyze the attack surface to identify exposed components, entry points, and potential attack vectors. argument-hint: [system name or API endpoint list]
Analyze Attack Surface Command
Chain these steps:
- Use the
data-flow-diagram-securityskill to identify all entry points: external APIs, user inputs, integrations with third parties, admin interfaces - Use the
trust-boundary-analysisskill to map which components are exposed to untrusted users vs. internal-only 3
Alternatives in Development
- Career-Ops For Codex — Read CLAUDE.md for all project instructions, routing, and behavioral rules 32.5k ★
- Om Standup — Morning kickoff 4.6k ★
- JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Review Attack Surface
Review external attack surface using Zscaler EASM findings, exposed services, and lookalike domains.
Analyze Draft
Analyze a newsletter draft through critical thinking questions to strengthen arguments and identify potential
Analyze Feedback
Analyze raw user feedback (support tickets, NPS comments, app store reviews, survey responses) to identify top
Dead Code
List orphan functions, classes, atoms, and endpoints with no inbound references — framework entry points exclu
Diagramsystemflow
Read-only forensic analysis of this repo — trace system flows from entry points (HTTP routes, CLI, jobs, consu
/surface
View the prioritized attack surface for a target.
Related Agents
iOS Hunter
Hunts one assigned iOS attack surface (IPC and entry points, data storage, network security, binary and secret
Recon
Maps a repository's attack surface — structure, entry points, dependencies, trust boundaries. Use this first o
Paranoid Sentinel
A hyper-vigilant security code reviewer with paranoid delivery - performs thorough security analysis first, th