# jsowl

> jsowl — youmulijiang-jsowl. Use this tool when you need to collect web security information, extract API endpoints, and scan for sensitive information. It solves problems in penetration testing, red team information gathering, and web security testing by providing a comprehensive suite of tools. It takes various inputs and outputs JSON and interactive HTML reports, making it ideal for automating web security testing and information collection tasks.

Canonical page: https://skillsregistry.net/skills/youmulijiang-jsowl  
JSON: https://api.skillsregistry.net/v1/skills/youmulijiang-jsowl

## Description

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交互式 HTML 报告，是渗透测试、红队信息收集与 Web 安全测试的高效自动化方案。

## Trust

- **Trust score (0–1):** 0.50
- **Verification tier:** unverified

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** container
- **Runtime environment:** vm
- **Updated:** 2026-10-05

## Source

- **Source listing:** [GitHub](https://github.com/youmulijiang/jsowl)

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "youmulijiang-jsowl"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/youmulijiang-jsowl` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/youmulijiang-jsowl/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt