Outrider Recon

What it is

Outrider Recon at version 4.0.0, an unsigned release candidate (tag v4.0.0) that unifies previously separate version lines (Python 0.3.0 and plugin/content 3.1.0) into one number shared by the Python package and the Claude plugin/content bundle. Beyond the concept the summary gives, the page carries the concrete install paths, the self-check contract, the security posture of the release itself, and the exact boundary of what the web plane will and won't do.

What to do

Bootstrap from a checkout — this creates an isolated venv, links Claude skills, and runs a deterministic self-check with no API keys, targets, or network needed:

git clone https://github.com/Ap6pack/outrider-recon.git
cd outrider-recon
./bootstrap.sh            # --no-web for base install, --no-skills to skip skill linking
source .venv/bin/activate
outrider                 # starts the local browser portal

A healthy self-check ends with promoted_findings_total: 0 and schema_validity_rate: 1.0 — that is the confirmation the install works before touching a target.

Docker (Linux) binds loopback only by design, so it requires host networking:

docker build -t outrider-recon .
docker run --rm --network host outrider-recon   # then open http://127.0.0.1:8765

Claude Code plugin path (skills namespaced outrider-recon:<skill>, updated via /plugin):

/plugin marketplace add Ap6pack/outrider-recon
/plugin install outrider-recon@outrider-recon

Note the CLI and web portal install separately from the skills. A one-click curl … install.sh | bash also exists, cloning to ~/.local/share/outrider-recon and symlinking skills into ~/.claude/skills/.

Caveats

• Unsigned. Release artifacts (wheel, sdist, plugin/content bundle) are checksum-verifiable via a single SHA256SUMS, but the project claims no cryptographic signing and no PyPI / Claude Marketplace publication. The one-click installer is curl | bash; verify against the checksums yourself.
• The web control plane is deliberately limited: it supports guarded run creation, scope checks, workflow-state transitions, approval grant/revoke, evidence-integrity verification, and explicit human finding promotion — but does not support recon execution, skill execution, automatic finding promotion, evidence editing/deletion, result upload, report generation, exports, or arbitrary MCP servers in the browser.
• Discovery enrichment is off unless launched with outrider --enable-mcp-enrichment.
• Origins matter for a security tool: forked from elementalsouls/Claude-OSINT, original framework SnailSploit/offensive-checklist (v1.x). MIT licensed.