subdomain-enumEnumerate subdomains for any domain using DNS brute-force and certificate transparency logs (crt.sh). Use when a user needs to discover subdomains, perform r...
Install via ClawdBot CLI:
clawdbot install Johnnywang2001/subdomain-enumGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://crt.sh/?q=%.{domain}&output=jsonAudited Apr 17, 2026 · audit v1.0
Generated Mar 22, 2026
Security professionals use this skill during the initial reconnaissance phase of penetration tests to discover subdomains of a target domain. It helps identify potential entry points, forgotten services, and map the attack surface, enabling a thorough security assessment before exploitation.
Organizations employ this skill to audit their digital footprint by enumerating subdomains, uncovering exposed or unauthorized services. It aids in reducing risk by identifying and securing forgotten subdomains that could be vulnerable to attacks.
IT auditors use the skill to map an organization's infrastructure by discovering all subdomains, ensuring compliance with policies and identifying misconfigurations. This provides a comprehensive view of the network for regulatory and internal audits.
Bug bounty hunters leverage this skill to find subdomains of target domains, searching for hidden or misconfigured services that may contain vulnerabilities. It streamlines the discovery process, increasing efficiency in identifying potential bugs for rewards.
Forensic analysts use subdomain enumeration to trace malicious activities by uncovering associated subdomains used in attacks. This helps in mapping infrastructure, identifying command-and-control servers, and gathering evidence during investigations.
Integrate this skill into a cloud-based security platform offering automated attack surface management and reconnaissance services. Charge subscription fees based on scan frequency, number of domains, and advanced features like custom wordlists and API access.
Offer specialized cybersecurity consulting services using this skill to perform subdomain enumeration as part of penetration testing, vulnerability assessments, or compliance audits. Generate revenue through project-based fees or retainer contracts for ongoing security monitoring.
Provide a free version of the tool with basic subdomain enumeration capabilities, and monetize through premium features such as larger wordlists, faster scans, JSON API access, and detailed reporting. Upsell to enterprise clients for advanced integrations.
💬 Integration Tip
Integrate this skill into existing security workflows by automating scans via scripts and using JSON output for easy data parsing into other tools like SIEM systems or dashboards.
Scored Apr 19, 2026
Build or update the BlueBubbles external channel plugin for Clawdbot (extension package, REST send/probe, webhook inbound).
Expert frontend design guidelines for creating beautiful, modern UIs. Use when building landing pages, dashboards, or any user interface.
Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.
Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when building web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.
Curated collection of professional color and typography themes for styling artifacts — slides, docs, reports, landing pages. Use when applying visual themes to presentations, generating themed content, or creating custom brand palettes. Triggers on theme, color palette, font pairing, slide styling, presentation theme, brand colors.
Create distinctive, production-grade static sites with React, Tailwind CSS, and shadcn/ui — no mockups needed. Generates bold, memorable designs from plain text requirements with anti-AI-slop aesthetics, mobile-first responsive patterns, and single-file bundling. Use when building landing pages, marketing sites, portfolios, dashboards, or any static web UI. Supports both Vite (pure static) and Next.js (Vercel deploy) workflows.