AUTHORIZED web-pentest / SPA browser automation — drive a real browser through an intercepting proxy with a hard-welded scope to catalog routes, XHR/fetch/WebSocket APIs, forms, and multi-role auth into report-ready JSON + HAR. Triggers when a target is a JS-rendered page / SPA, needs a real browser, or requires capturing live network traffic.
$npx -y skills add fb0sh/pentester --skill pentester-playwrightInstalls into the current project.
Run `npx skills use "https://github.com/fb0sh/pentester" --skill "fb0sh/pentester/pentester-playwright"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/fb0sh/pentester" that are relevant to the current task. Run `npx skills add "https://github.com/fb0sh/pentester"` and select the relevant skills, then follow their instructions.