Skill UI

This skill probes website authentication flows to identify security vulnerabilities like CSRF, redirect leaks, weak cookies, and OAuth misconfigurations. It automates login processes, analyzes trajectories, and generates structured findings reports. Suitable for pre-deployment audits, investigating token leaks, and regression testing. Sensitive data is quarantined and never exposed unredacted.

Drives a site authentication flow once, sanitizes cookies through AIDefence, and vaults a reusable cookie handle in AgentDB so later browser skills can reuse the session without re-authenticating.

A specialized skill for analyzing client-side persistence mechanisms, including cookies, localStorage, sessionStorage, IndexedDB, and Service Workers. It is crucial for security testing and CTF environments where application behavior or critical decision branches are determined by stored session state, cached data, or local client-side variables. Use this to trace the smallest stateful sequence leading to a decisive outcome.

A specialized, downstream skill designed for forensic analysis within a confined sandbox environment, particularly for CTF challenges. It guides the user to inspect the full stack behavior, including API interactions, server routing, browser state (cookies, local storage), and asynchronous worker processes. Use this skill to trace complex, end-to-end request flows, debug authentication/session leaks, or diagnose discrepancies between frontend UI and backend enforcement.

Performs a systematic GDPR compliance audit of a website across 10 sections and a 22-item annex, covering legal notices, cookies, data forms, privacy policy, trackers, and data transfers. Produces a structured report with risk levels, blocking issues, and prioritized recommendations. Suitable for DPOs and compliance practitioners.

This skill outlines a discipline for capturing and redacting evidence in bug bounty submissions. It guides users on masking sensitive data like session cookies and PII while preserving triage-useful metadata. It covers protocols for screenshots, HAR files, and HTTP requests to prevent data leaks.

Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur during a red-team engagement. Triggers on recheck failures, timing shifts, new WAF cookies, and lockout anomalies. Provides investigation discipline, WAF-evasion confirmation, and positive finding templates for IR responsiveness.