What problem does it solve? Manually copy-pasting large session cookies, JWTs, and CSRF tokens into every test request is slow and error-prone. This Skill lets you find an authenticated request in Caido's HTTP history and modify only the path, method, or body while preserving all auth context, so security testing happens entirely through the Caido proxy with full visibility. ## Core Features & Use Cases - HTTP History Search & Edit-Replay: Query traffic with HTTPQL, then edit and resend requests with auth headers intact for IDOR, privilege escalation, and header bypass testing. - Full Caido Management: Manage scopes, filter presets, environments, replay sessions/collections, projects, hosted files, tasks, and intercept state from the terminal. - Findings & PoC Export: Create deduplicated findings linked to requests and export any request as a ready-to-use curl command for reports. - Use Case: During an authorized bug-bounty test, search for req.path.cont:"/api/user", edit the request ID to change the user ID parameter, confirm the IDOR, then create a finding and export a curl PoC — all without leaving the CLI. ## Quick Start Ask the AI to run the caido-client health command to verify the connection, then search recent requests and edit one to test a different API path.
