Skill UI

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

A powerful skill for generating scripts using Puppeteer, enabling robust browser automation, data scraping, and PDF creation. Use this when you need to simulate user interactions, perform complex web testing, or extract content from dynamic websites, including handling wait strategies, network interception, and generating media files.

This skill generates comprehensive visual regression test configurations using SmartUI for accurate screenshot comparison on cloud platforms. It is framework-agnostic, supporting major tools like Playwright, Selenium, Cypress, and Puppeteer. Use it when detecting UI changes, ensuring visual consistency, or running automated visual tests across multiple viewports and browsers.

This skill provides comprehensive web browser automation capabilities for agents. It utilizes AI-optimized snapshots, reducing context size by 93% by using element references instead of full DOM. Functions include navigation, interactive element extraction, form filling, data scraping, and state management across multiple isolated sessions. Ideal for complex web testing and data extraction workflows.

This skill probes website authentication flows to identify security vulnerabilities like CSRF, redirect leaks, weak cookies, and OAuth misconfigurations. It automates login processes, analyzes trajectories, and generates structured findings reports. Suitable for pre-deployment audits, investigating token leaks, and regression testing. Sensitive data is quarantined and never exposed unredacted.

This tool enables complex web interactions using plain natural language commands. Instead of relying on unreliable selectors, it utilizes a powerful page-agent and LLM loop to interpret user intent, performing actions like filling forms, clicking buttons, and extracting data from dynamic websites. Ideal for testing and automation in pages with ambiguous or changing markup.

Automates comprehensive end-to-end Quality Assurance (QA) for deployed web applications. This skill performs multi-stage testing, including smoke tests, complex user interactions (forms, authentication), visual regression checks across breakpoints, performance monitoring (Core Web Vitals), and WCAG accessibility audits.

Opens a named, traced browser session bound to an RVF cognitive container, recording every action as a ruvector trajectory step. It is the primitive that browser extraction, form-fill and testing skills compose on, enabling session replay and analysis.

Replay a recorded browser session trajectory against the same or mutated URL, recovering from DOM drift via selector-embedding similarity. Ideal for regression testing, deterministic re-runs, and bug reproduction.

A comprehensive skill for automated UI testing. It records complex user interactions, navigates web pages, and validates functionality by producing a replayable RVF artifact. Use it to verify user flows, detect regressions against baseline sessions, and re-run complex tests in a real browser environment.

This SDK allows asynchronous Python programming to control a live web browser, simulating user interactions for web automation, testing, and data extraction. Users can navigate pages, locate elements, fill forms, click buttons, and capture snapshots of the current page's content. It enforces a 'perceive → act → verify' cycle, making it ideal for building robust web scrapers and end-to-end testing tools.