Home / Skills / easm-review-attack-surface

easm-review-attack-surface

Review the organization's external attack surface using Zscaler EASM. Lists organizations, retrieves findings (exposed services, vulnerabilities, misconfigurations), checks for lookalike domains, and generates a prioritized risk summary. Use when a security team asks: 'What is our external exposure?', 'Are there any critical findings?', or 'Check for lookalike domains.'

ScannedSkillSource: Gemini CLI extensions gallery

50 stars Updated 23d ago License MIT Context ≈100 tokens always loaded

58popular

Why this score

Stars

5/35

Usage (forks)

3/15

Upkeep

25/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 50 stars are split between them (about 5 each) for scoring.

Popularity score: 58/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 21, 2026 at commit 809f68d6c921, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This oneeasm-review-attack-surface zscaler/zscaler-mcp-server · Skill	58	★ 50	≈100 always	23d ago
org-attack-surface elementalsouls/Claude-OSINT · Skill Both about attack and surface	74	★ 2.8k	≈155 always	26d ago
shiro-attack-cli SummerSec/ShiroAttack2 · Skill Both about attack	71	★ 2.6k	≈61 always	5mo ago
attack-cache-poison CyberStrikeus/CyberStrike · Skill Both about attack	71	★ 3.2k	≈29 always	21d ago
attack-planner 0xSteph/pentest-ai-agents · Subagent Both about attack and finding	64	★ 2.4k	≈21 in chat	29d ago
attack-path-analysis openai/codex-security · Skill Both about attack and finding	80	★ 11k	≈73 always	16d ago

Install

mkdir -p .claude/skills/easm-review-attack-surface

curl -sL https://codeload.github.com/zscaler/zscaler-mcp-server/tar.gz/809f68d6c921e0829fb2e07e9b797e7e70cf720b | tar -xz -C .claude/skills/easm-review-attack-surface --strip-components=4 "zscaler-mcp-server-809f68d6c921e0829fb2e07e9b797e7e70cf720b/skills/easm/review-attack-surface"

To remove it later:

rm -rf .claude/skills/easm-review-attack-surface

npx skills add zscaler/zscaler-mcp-server --skill easm-review-attack-surface

gemini extensions install https://github.com/zscaler/zscaler-mcp-server --ref=809f68d6c921e0829fb2e07e9b797e7e70cf720b

Pinned to commit 809f68d6c921 as listed by Gemini CLI extensions gallery.

Context cost: ≈100 tokens loaded every session (name and description), plus ≈2.0k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Used for

Security › Security review

Facts

Repo: zscaler/zscaler-mcp-server
Stars: 50
Forks: 34
Last push: 2026-10-12 (23d ago)
License: MIT
Owner: zscaler · since 2012
Language: Python
Works with: Claude Code, Skills CLI, Gemini CLI