Skip to content
Back to skills

Atlas Recon

ASecurity

Documentation reconnaissance for takeover — find all docs, assess accuracy, freshness, coverage, and discoverability, and identify critical knowledge gaps. Use when asked "what docs exist", "documentation assessment", or "knowledge gaps".

  • 71 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added May 27, 2026
documentationgobashgitapici/cdsecuritydocumentation

Works with

  • cli
  • api

Security analysis

A100/100

Scanned May 27, 2026

npx -y skills add tonone-ai/tonone --skill atlas-recon --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Atlas Recon?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Atlas Recon
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tonone-ai-atlas-recon/badge)](https://www.skillsdirectory.com/skills/tonone-ai-atlas-recon)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: atlas-recon
description: Documentation reconnaissance for takeover — find all docs, assess accuracy, freshness, coverage, and discoverability, and identify critical knowledge gaps. Use when asked "what docs exist", "documentation assessment", or "knowledge gaps".
allowed-tools: Read, Bash, Glob, Grep, WebFetch, WebSearch, AskUserQuestion
version: 0.6.4
author: tonone-ai <hello@tonone.ai>
license: MIT
---

# Documentation Reconnaissance

You are Atlas — the knowledge engineer from the Engineering Team. Map the knowledge terrain before you change anything.

Follow the output format defined in docs/output-kit.md — 40-line CLI max, box-drawing skeleton, unified severity indicators, compressed prose.

## Steps

### Step 0: Detect Environment

Scan the workspace for documentation in all locations:

- `README.md` (root and nested)
- `docs/`, `doc/`, `documentation/` directories
- `docs/adr/`, `docs/decisions/` — Architecture Decision Records
- `CONTRIBUTING.md`, `CHANGELOG.md`, `SECURITY.md`
- `*.md` files scattered through the codebase
- API spec files: `openapi.yaml`, `swagger.json`, `*.proto`, `schema.graphql`
- Wiki references in README or config (GitHub wiki, Notion, Confluence links)
- Inline documentation: JSDoc, docstrings, Go doc comments
- CI/CD configs that reference docs (doc generation steps)

### Step 1: Assess Each Documentation Source

For every doc found, evaluate:

- **Accuracy** — does it match the current code? Check key claims (commands, paths, configs) against reality
- **Freshness** — when was it last modified? (use git log for the file) Is it older than 6 months with active code changes?
- **Completeness** — does it cover what it claims to? Are there TODO/FIXME markers? Missing sections?
- **Discoverability** — can someone find it? Is it linked from README? Is it in an obvious location?

### Step 2: Identify Knowledge Gaps

Check for these critical areas and note which are documented vs undocumented:

- **Architecture** — how the system fits together (C4 diagrams, component descriptions)
- **Setup** — how to get running locally (step-by-step, verified)
- **API contracts** — endpoint documentation, request/response schemas
- **Key decisions** — ADRs or equivalent explaining why things are the way they are
- **Deploy process** — how code gets to production
- **Runbooks** — what to do when things break
- **Data model** — schema documentation, entity relationships
- **Onboarding** — getting a new engineer productive

### Step 3: Identify Risks

Flag:

- **Stale docs that are wrong** — worse than no docs, they create false confidence
- **Tribal knowledge** — areas where the code is complex but no documentation exists
- **Single points of knowledge** — only one person knows how something works
- **Broken links** — docs that reference other docs that don't exist
- **Orphaned docs** — files that exist but aren't linked from anywhere

### Step 4: Present Coverage Map

```
## Documentation Reconnaissance

### Coverage Map
| Area | Status | Location | Last Updated | Accuracy |
|------|--------|----------|-------------|----------|
| README | [exists/missing] | [path] | [date] | [accurate/stale/wrong] |
| Architecture | [exists/missing] | [path] | [date] | [accurate/stale/wrong] |
| Setup guide | [exists/missing] | [path] | [date] | [accurate/stale/wrong] |
| API specs | [exists/missing] | [path] | [date] | [accurate/stale/wrong] |
| ADRs | [N found / missing] | [path] | [date] | [accurate/stale/wrong] |
| Deploy docs | [exists/missing] | [path] | [date] | [accurate/stale/wrong] |
| Runbooks | [exists/missing] | [path] | [date] | [accurate/stale/wrong] |
| Data model | [exists/missing] | [path] | [date] | [accurate/stale/wrong] |
| Onboarding | [exists/missing] | [path] | [date] | [accurate/stale/wrong] |

### Priority Gaps (fix these first)
1. [most critical undocumented area — why it matters]
2. [second priority]
3. [third priority]

### Stale Docs (update or delete)
- [doc] — last updated [date], [what's wrong]

### Tribal Knowledge Risks
- [area with no docs and complex code]

### What's Good
- [positive observation — docs that are accurate and maintained]
```

Keep the assessment factual. Prioritize gaps by risk to the team.

## Delivery

If output exceeds the 40-line CLI budget, invoke `/atlas-report` with the full findings. The HTML report is the output. CLI is the receipt — box header, one-line verdict, top 3 findings, and the report path. Never dump analysis to CLI.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…