client-browser-automation

Crawl authenticated web applications and inspect DOM structures for security validation.

Updated Jul 30, 2026

Search Tags:#web-security #pentesting #access-control #browser-automation #evidence-collection #spa-testing

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill client-browser-automation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: client-browser-automation
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/client-browser-automation
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill client-browser-automation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the challenge of performing authenticated web application security testing while maintaining strict adherence to scope, safety, and evidence-gathering protocols.

Core Features & Use Cases

Automated Validation: Safely crawl and inspect SPAs, DOM structures, and client-side storage within defined boundaries.
Evidence Discipline: Automatically capture redacted screenshots and session logs to ensure compliance and auditability.
Use Case: Use this skill to verify that an authenticated dashboard does not leak sensitive data in localStorage or expose admin-only routes to a standard user account.

Quick Start

Use the client-browser-automation skill to crawl the target application at https://example.com using the provided test account credentials and a maximum depth of 2 levels.

Frequently Asked Questions about client-browser-automation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate browser-assisted security validation for authenticated web applications?▼

Automate browser-assisted security validation by performing controlled crawling, DOM inspection, and evidence collection within authorized pentest boundaries. This skill safely validates authenticated SPAs while enforcing strict rate limiting and scope adherence.

What is the best way to test access control and client-side storage in SPA pentesting?▼

The best way to test access control in SPA pentesting is to automate DOM inspection and client-side storage auditing. This verifies that authenticated dashboards do not leak sensitive data in localStorage or expose admin-only routes to standard users.

Can I use browser automation to capture redacted evidence during authorized pentesting?▼

Yes, you can use browser automation to capture redacted screenshots and session logs during authorized pentesting. This evidence discipline ensures compliance and auditability while maintaining strict adherence to defined scope boundaries.

How do I crawl a target application with test account credentials safely?▼

Crawl target applications safely by providing test account credentials and setting a maximum depth level. The skill enforces strict scope boundaries, rate limiting, and redaction policies to ensure safe and compliant testing of authenticated web applications.

What are the limitations of automated DOM inspection for security testing?▼

Automated DOM inspection is limited by strict scope boundaries, rate limiting, and redaction policies. It must only be used for authorized pentest engagements, requiring strict adherence to safety protocols to prevent unintended access outside defined testing perimeters.