How do I install the Uncover skill?

Run npx skillmds@latest add javimosch/uncover in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Uncover skill do?

Use this skill when the user wants to discover exposed hosts, perform security reconnaissance, or find assets on the internet. It is listed under Security on SkillMD.

Is Uncover safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Uncover?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Uncover free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Uncover?

javimosch (@javimosch) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Uncover by javimosch — Agent Skill

Name: Uncover
Author: javimosch

File contents

uncover Plugin

Quickly discover exposed hosts on the internet using multiple search engines. Security reconnaissance tool for finding exposed assets.

Commands

Host Discovery

uncover host discover — Discover exposed hosts

Utility

uncover _ _ — Passthrough to uncover CLI

Usage Examples

"Discover exposed hosts"
"Search for assets"
"Security reconnaissance"
"Find exposed services"

Installation

brew install uncover

Or via Go:

go install github.com/projectdiscovery/uncover/cmd/uncover@latest

Examples

# Discover hosts
uncover host discover example.com

# Use specific engine
uncover host discover example.com --engine shodan

# JSON output
uncover host discover example.com --json

# Limit results
uncover host discover example.com --limit 100

# Any uncover command with passthrough
uncover _ _ example.com
uncover _ _ example.com --json

Key Features

Multi-engine - Shodan, Censys, and more
Fast - Quick discovery
Recon - Security reconnaissance
OSINT - Open source intelligence
Bug bounty - Great for bug bounty hunting
Exposed assets - Find exposed hosts
JSON output - Structured results
Configurable - Custom search engines
Cross-platform - Linux, macOS, Windows
Powerful - Advanced filtering

Notes

Great for security research
Multiple search engine support
Perfect for bug bounty hunters
Can find exposed services

Frequently asked questions

Uncover