Toxkay/reconw-orchestrator ? reverse-engineered prompt

Build me a local first command line tool for security recon that can take a bug bounty program name, an in scope targets file, and an out of scope file, then run a full discovery pipeline on just the allowed targets.

I want it to check that the needed recon tools are installed, then do passive subdomain discovery, resolve and filter live hosts, probe web services, crawl a little for hidden endpoints and API routes, and finally rank what looks most interesting with a simple explainable score. Keep track of every run for each program in a local SQLite database, and save the database under the program name when possible.

Also generate a clean offline HTML report I can open later, with search and filters for severity, run details, and a breakdown of why each target scored that way. It should support listing past runs and regenerating a report from an old database. Make it cross platform if you can, and look up current docs online if you need to for the external tools.