skills.rest
brucesongs
brucesongsCOMMUNITY
Explore all skills by this author →
GitHub

browser-qa

Automates browser-based security testing using Playwright and devtools.

60|14|Updated Apr 27, 2026
Search Tags:#xss#playwright#web-security#csrf#browser-testing#network-interception#evidence-capture
One-click install
npx skills add https://github.com/brucesongs/kali-claw --skill browser-qa-brucesongs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: browser-qa
Source: https://github.com/brucesongs/kali-claw/tree/main/skills/browser-qa
Command: npx skills add https://github.com/brucesongs/kali-claw --skill browser-qa-brucesongs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web applications are increasingly complex and dynamic, making manual security testing time-consuming, error-prone, and difficult to scale. This Skill enables automated browser-based security testing to systematically uncover client-side and API vulnerabilities by simulating typical user interactions in real web scenarios.

Core Features & Use Cases

  • Automated browser interactions: click, type, navigate, and verify application responses while monitoring network activity, JavaScript execution, and DOM mutations.
  • Security testing capabilities: detect client-side issues such as XSS sinks, CSRF presence, cookie flags, and CSP violations through realistic user flows.
  • Evidence capture and analysis: generate screenshots, HAR files, and console logs for audit trails and reporting.
  • Use cases: validate login flows, test authorization checks, and explore DOM-based vulnerabilities in modern web apps.

Quick Start

Launch Playwright-based browser automation to start security testing against a target web app.

Frequently Asked Questions about browser-qa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate browser security testing with Playwright to detect XSS and CSRF vulnerabilities?▼

Automated browser security testing with Playwright simulates user interactions to monitor client-side behavior, actively detecting XSS sinks, CSRF presence, and CSP violations in dynamic web applications.

How do I capture network traffic and console logs as evidence during web security testing?▼

Capture network traffic and console logs as evidence by utilizing browser devtools during automated testing, generating screenshots, HAR files, and console logs for comprehensive audit trails and reporting.

Can I integrate Playwright-based security testing into a CI pipeline for deterministic execution?▼

Playwright-based security testing supports deterministic execution and CI-friendly integration, allowing you to systematically validate authentication flows and authorization checks within automated pipelines.

What is the best way to test DOM mutations and client-side JavaScript execution for vulnerabilities?▼

Test DOM mutations and JavaScript execution by running automated browser interactions that click, type, and navigate while monitoring DOM changes to uncover DOM-based vulnerabilities in modern web apps.

Does automated browser testing work for validating login flows and authorization checks in dynamic web applications?▼

Automated browser testing effectively validates login flows and authorization checks by simulating typical user interactions in real web scenarios and monitoring application responses dynamically.

Related Skills

Explore More Software Engineering Skills→
nimadorostkarnimadorostkar
25

e2e-playwright

Standardize Playwright end-to-end browser tests with web-first assertions and isolated parallel execution.

Community
Advanced
0xShe0xShe
386

php-route-tracer

Trace PHP route handlers to sinks with branch evidence and controllability analysis.

Community
Advanced
hughescrhughescr
1

hugo-testing

Automate client-side JavaScript tests in Hugo projects using Bun and happy-dom.

Community
Advanced
AcczdyAcczdy
2

conducting-mobile-app-penetration-test

Test iOS and Android apps for vulnerabilities using OWASP MASTG.

Community
Advanced