yakit-hotpatch-skill

What problem does it solve?

This Skill guides AI to write Yakit Web Fuzzer hotpatch code, enabling dynamic injection of behavior at runtime through customizable fuzztag functions and hooks.

Core Features & Use Cases

• Provide a centralized API reference and usage patterns for beforeRequest, afterRequest, mirrorHTTPFlow, retryHandler, customFailureChecker, and mockHTTPRequest.
• Support custom fuzztag functions using {{yak(...)}} and dynamic dyn tags for on-the-fly payload generation.
• Use in scenarios like CSRF token bypass, parameter signing, response data extraction, and mock responses during fuzzing.

Quick Start

Start by loading SKILL.md's frontmatter to define name and description, then implement simple Yak snippets in the body to exercise hotpatch hooks.

• Then test with a minimal beforeRequest example that returns the same request, and a mirrorHTTPFlow example that extracts a value from the response.
• Finally deploy and invoke the skill to auto-generate hotpatch code during fuzzing runs.