Routes Yaklang programming and hot-patch tasks to specialized skill topics.
npx skills add https://github.com/yaklang/yak-skills --skill yak-yaklang
Please help me install this Agent Skill. Skill: yak Source: https://github.com/yaklang/yak-skills/tree/main/skills/yak Command: npx skills add https://github.com/yaklang/yak-skills --skill yak-yaklang
if YAK_MAIN { runSelfTest() } pattern so scripts can be self-tested via go run common/yak/cmd/yak.go and safely pasted back into Yakit. - Use Case: You need to write a Web Fuzzer hot-patch script that decrypts AES-CBC traffic. Load this Skill first, follow the routing table to webfuzzer-hotpatch, then apply the YAK_MAIN self-test pattern to verify your script locally before deploying it in Yakit. ## Quick Start Ask the AI to load the yak skill and recommend which specialized skill to use for writing an MITM hot-patch script that hijacks and modifies HTTP requests.High-intent search queries and answers about installing and using this skill.
Use the routing table in this Skill: MITM proxy hijacking goes to mitm-hotpatch, single-tab Fuzzer encryption or retry logic goes to webfuzzer-hotpatch, and system-wide shared rules go to global-hotpatch. Match your task signal to the table row.
MITM hijack hooks like hijackHTTPRequest submit results via forward(pkt) or drop(), while Fuzzer beforeRequest/afterRequest hooks submit via return values. Their mirrorHTTPFlow signatures also differ in parameter lists.
Wrap self-test logic in `if YAK_MAIN { runSelfTest() }` and run it with `go run common/yak/cmd/yak.go <file>` or `yak <file>`. Yakit sets YAK_MAIN to false when loading, so the self-test never runs inside the tool.
Yak does not automatically call func main(); only top-level statements execute. Use the convention `if YAK_MAIN { main() }` so the entry point runs from the command line but not when loaded as a plugin.
Hooks are called concurrently, so top-level globals must be read-only constants. For aggregation use sync.Map, sync.NewMutex(), or db.*/risk.* APIs instead of mutating shared slices or maps, which causes data races.
Eviden0Compile source code into SSA IR and trace data flow with SyntaxFlow to detect vulnerabilities.
t0mmy4Generate Yakit Web Fuzzer hotpatch code with custom fuzztag functions and hooks.
AngelP17Debug and validate Forge CLI behavior using cargo builds and shell commands.
AllBeingsFutureType text into webpage input fields matched by CSS selectors.