autorecon_scan

What autorecon_scan does on Hexstrike Ai

AI agents invoke autorecon_scan to trigger actions in Hexstrike Ai. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why autorecon_scan is rated High

AutoRecon is a well-known automated multi-threaded network reconnaissance tool that runs numerous active scanning and enumeration tools against targets. Despite the empty description, the tool name combined with the server context (offensive security, pentesting, automated scanning) strongly indicates this executes active network reconnaissance scans against external targets.

From the tool's definition Tool name 'autorecon_scan' on a server explicitly described as running '150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation'. Sibling tools include reconnaissance workflows and vulnerability assessments.

The rule that runs autorecon_scan safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Hexstrike Ai, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For autorecon_scan, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "autorecon_scan": {
      "limits": [
        {
          "counter": "autorecon_scan_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about autorecon_scan