recon-basic-info skillA
recon-basic-info is agent-read markdown (skill) from cha0upup/leoai: 对新的 Puppet 立足点执行低噪声基础侦察，判断当前权限、业务价值、网络位置、关键服务、容器边界和可用行动入口，并形成红队主机画像。当进入新目标、需要判断立足点价值或尚无可靠侦察摘要时使用。.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# 立足点快速分诊 用最少交互回答：这台主机是什么、当前身份能做什么、它通向哪里、是否值得继续投入。 ## 行动目标 - 确认当前身份、权限边界和执行环境。 - 判断主机业务角色及演练目标价值。 - 识别本地高价值服务、凭据来源、提权面和潜在跳板价值。 - 生成最多 3 条按收益、成功率和噪声排序的后续路径。 ## 授权与 ROE - 风险等级：low；访问模式：read-only。 - 仅在当前 Puppet 主机执行被动检查，不写文件、不改配置。 - 不主动访问云 metadata、公网地址或其他主机。 - 端口扫描、登录验证、凭据使用和写操作必须交给对应 skill，并遵循用户授权范围。 - 摘要保留已发现的密码、Token、Cookie 和密钥原值及其来源，便于报告整理与后续复用。 ## OPSEC 预算 - 默认最多调用一次 `getBasicInfo` 和两次合并后的 `exec`。 - 进程、监听和路由输出各限制在 80 行内。 - 禁止全盘搜索和高频探测；已有摘要中的可靠事实不要重复采集。 - 记录命令缺失、权限拒绝和可见性盲区，不反复尝试同一失败动作。 ## 工作流 1. 阅读系统提示中注入的当前侦察摘要，提取已有事实、任务目标和未解决问题。 2. 创建 4 步以内计划：身份与环境、网络与服务、立足点价值、摘要与交接。 3. 并行调用 `getBasicInfo` 和适配当前 OS 的受限 `exec`。 4. 将发现归类为：事实、推断、行动入口、盲区。 5. 按“目标价值、可达性、权限收益、噪声”对后续路径排序。 6. 系统会从成功工具结果中自动提取并沉淀稳定事实；最终结论只补充本轮新增发现。 ## 推荐采集 Linux/macOS： ```bash id; whoami; pwd; uname -a; cat /etc/os-release 2>/dev/null ip addr 2>/dev/null || ifconfig 2>/dev/null ip route 2>/dev/null || netstat -rn 2>/dev/null ss -tlnp 2>/dev/null || netstat -tlnp 2>/dev/null ps -eo pid,user,comm,args --no-header 2>/dev/null | grep -E 'java|tomcat|nginx|apache|mysql|postgres|redis|nacos|docker|containerd|kube|jenkins|gitlab|python|node' | head -80 …
Read the whole file at its exact version.
How to install
mdr add cha0upup/leoai/recon-basic-info@git:20260811.70d939dmdr add cha0upup/leoai/recon-basic-info@sha256:b1aca4e76251c718Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_2mmeci4g4y2jfqtj)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260811.70d939d latest | 2026-08-11 | 70d939d | 5,069 B | A | view · diff |
| git:20260811.eedfbb7 | 2026-08-11 | eedfbb7 | 5,012 B | A | view · diff |
| git:20260802.c3cfa70 | 2026-08-02 | c3cfa70 | 4,987 B | A | view · diff |
| git:20260801.6c9c129 | 2026-08-01 | 6c9c129 | 4,982 B | A | view · diff |
| git:20260616.da8811e | 2026-06-16 | da8811e | 12,255 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5069 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
cha0upup/leoai · 307 stars · license GPL-3.0 · pushed 2026-09-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_2mmeci4g4y2jfqtj GET https://markdownregistry.com/api/v1/resolve?ref=cha0upup/leoai/recon-basic-info GET https://markdownregistry.com/api/v1/blob/b1aca4e76251c718c442ed24e8f7f24794dc365f6e26c531db5598cc230c4c4a
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.