What problem does it solve? When testing applications with encrypted or signed traffic, configuring hooks separately for every MITM task and Web Fuzzer tab is repetitive and error-prone. This Skill provides one global hot-patch layer that applies the same hooks across all MITM and Web Fuzzer traffic in Yakit. ## Core Features & Use Cases - Global Hook Layer: Reuses all 12 MITM hooks (beforeRequest, afterRequest, hijackHTTPRequest, hijackSaveHTTPFlow, mockHTTPRequest, mirror* family) with global hooks executing before module-level hooks; only one global patch can be active at a time. - Protocol Normalization Recipes: Includes runnable examples for site-wide SM4-CBC transparent encryption/decryption, dynamic challenge retrieval with HMAC signature injection, unified Authorization header injection, and status-code-based traffic coloring. - Self-Testing Examples: Every example follows the YAK_MAIN guard convention so scripts run standalone with yak xxx.yak for offline assertion-based verification. - Use Case: A target API requires a fresh challenge token and HMAC signature on every request. Write one global beforeRequest hook that fetches the challenge, computes the signature, and injects it—every Fuzzer tab and MITM session now sends valid signed requests automatically. ## Quick Start Ask the AI to write a Yakit global hot-patch script that injects an Authorization Bearer token into every outgoing request using the beforeRequest hook with a YAK_MAIN self-test.
