# ops-reconnaissance

Reconnaissance, OSINT, service enumeration, and exposure discovery workflows for Specter Codex.

- **Kind:** plugin (installs as one bundle)
- **Owner:** SpecterOps
- **Source:** https://github.com/SpecterOps/skills (`plugins/ops-reconnaissance`)
- **Pinned commit:** `e655f93ab694c446b76672efe6e71e62aac0b7b8`
- **Page:** https://forefy.com/plugins/5ea55717-119f-58f2-8d15-c11877ec29b0
- **API (JSON):** https://forefy.com/api/asr/plugins/5ea55717-119f-58f2-8d15-c11877ec29b0

## Install

Ask your agent: `Install the ops-reconnaissance plugin securely from: https://forefy.com/plugins/5ea55717-119f-58f2-8d15-c11877ec29b0 globally to ~/.claude/skills`

Or run the pinned install script: `curl -fsSL https://forefy.com/api/asr/plugins/5ea55717-119f-58f2-8d15-c11877ec29b0/install | bash` (`?location=project` for the current project, `&shell=powershell` with `irm ... | iex`; `harness=agents` prints the Codex commands).

## Skills in this plugin (3)

- [nmap-parse](https://forefy.com/skills/3fa8992b-d976-457b-bcc3-4e7cca556326): Parse nmap scan output and generate actionable recon notes. Use when analyzing nmap XML/grepable output, planning service enumeration, or doing network reconna…
- [osint-recon](https://forefy.com/skills/2f383c2a-3bf1-4519-aa94-ee9156f0ed9a): Perform OSINT and external reconnaissance for approved targets. Use for subdomain discovery, infrastructure mapping, technology fingerprinting, and recon repor…
- [shodan](https://forefy.com/skills/f168b5fa-fde8-4ab7-87d7-9ff527ce8857): Query Shodan for reconnaissance, target enrichment, and exposed service discovery. Builds queries, parses results, and highlights interesting findings. Require…