Skill UI

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

A powerful skill for generating scripts using Puppeteer, enabling robust browser automation, data scraping, and PDF creation. Use this when you need to simulate user interactions, perform complex web testing, or extract content from dynamic websites, including handling wait strategies, network interception, and generating media files.

This skill generates comprehensive visual regression test configurations using SmartUI for accurate screenshot comparison on cloud platforms. It is framework-agnostic, supporting major tools like Playwright, Selenium, Cypress, and Puppeteer. Use it when detecting UI changes, ensuring visual consistency, or running automated visual tests across multiple viewports and browsers.

This skill provides comprehensive web browser automation capabilities for agents. It utilizes AI-optimized snapshots, reducing context size by 93% by using element references instead of full DOM. Functions include navigation, interactive element extraction, form filling, data scraping, and state management across multiple isolated sessions. Ideal for complex web testing and data extraction workflows.

This skill performs an adversarial audit of web application authentication flows. It systematically probes for critical security vulnerabilities such as missing CSRF protection, insecure session cookies (lacking Secure/HttpOnly flags), risky cross-origin redirects, and OAuth misconfigurations. It generates a structured report detailing findings and severity levels, making it ideal for pre-deployment security audits and regression testing.

Automates comprehensive end-to-end Quality Assurance (QA) for deployed web applications. This skill performs multi-stage testing, including smoke tests, complex user interactions (forms, authentication), visual regression checks across breakpoints, performance monitoring (Core Web Vitals), and WCAG accessibility audits.

This is a foundational primitive skill for managing complex browser interactions. It initiates a named, traceable browser session within an RVF cognitive container, recording every user action as a trajectory step. Use it when starting any multi-step web exploration, ensuring the session state, actions, and results are preserved for later analysis, testing, or replay by downstream skills.

This skill allows for the deterministic re-running of recorded user session paths (trajectories). It is essential for regression testing, bug reproduction, and verifying UI flow consistency after deployments. Crucially, it utilizes browser-selectors embedding similarity to intelligently recover and retry interactions even when the underlying webpage structure (DOM) has drifted, providing robust testing capabilities.

Compares two recorded browser sessions step-by-step by matching steps via shared step IDs. It performs both pixel-level diffing on screenshots (for visual regression) and node-by-node diffing on accessible DOM snapshots (for structural changes). Ideal for visual regression testing, comparing A/B flow variants, and verifying replay consistency in UI development.

A comprehensive skill for automated UI testing. It records complex user interactions, navigates web pages, and validates functionality by producing a replayable RVF artifact. Use it to verify user flows, detect regressions against baseline sessions, and re-run complex tests in a real browser environment.