Download for MacApple silicon, macOS 14+
Skill

easm-review-attack-surface

@zscaler Updated 2026-10-12

Review the organization's external attack surface using Zscaler EASM. Lists organizations, retrieves findings (exposed services, vulnerabilities, misconfigurations), checks for lookalike domains, and generates a prioritized risk summary. Use when a security team asks: 'What is our external exposure?', 'Are there any critical findings?', or 'Check for lookalike domains.'

aigemini-cli-extensionhacktoberfestmcpmcp-serverpypizcczdx

Install

With your agent

Install OMGSkills skill "zscaler/zscaler-mcp-server:skills/easm/review-attack-surface" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.

Manual command

git clone https://github.com/zscaler/zscaler-mcp-server /tmp/zscaler-mcp-server && ln -s /tmp/zscaler-mcp-server/skills/easm/review-attack-surface ~/.claude/skills/easm-review-attack-surface

From README

EASM: Review Attack Surface Keywords attack surface, external exposure, easm findings, exposed services, vulnerabilities, lookalike domains, external risk, shadow IT discovery, internet-facing assets, security posture, easm audit Overview Review the organization's external attack surface by retrieving EASM findings, analyzing exposed services and vulnerabilities, checking for lookalike domains (phishing indicators), and generating a prioritized risk report. EASM provides visibility into internet-facing assets that may not be known to the security team. Use this skill when: A security administrator wants to review the organization's external exposure, check for new findings, investigate specific vulnerabilities, or detect lookalike domains used for phishing. --- Workflow Follow this 5-step process to review the external attack surface. Step 1: List EASM Organizations text EASM can monitor multiple organizations or business units.