Develop and maintain Capsem's MITM proxy for TLS traffic inspection.
npx skills add https://github.com/google/capsem --skill dev-mitm-proxy
Please help me install this Agent Skill. Skill: dev-mitm-proxy Source: https://github.com/google/capsem/tree/main/skills/dev-mitm-proxy Command: npx skills add https://github.com/google/capsem --skill dev-mitm-proxy
This Skill consolidates development, debugging, and testing of Capsem's air-gapped MITM proxy, which intercepts TLS traffic, applies policy, and records per-session telemetry.
Load the Capsem in-VM development environment and run the MITM proxy diagnostics to validate TLS termination, policy checks, and telemetry capture.
High-intent search queries and answers about installing and using this skill.
It intercepts TLS traffic through a MITM proxy pipeline that performs TLS termination, HTTP inspection, and telemetry recording. The proxy handles per-domain certificate minting and content-encoding decompression to capture reliable per-session data.
For HTTP inspection, the proxy pipeline handles content-encoding decompression and Server-Sent Events (SSE) parsing. This ensures reliable telemetry recording even on compressed streams passing through the TLS termination proxy.
Yes, you can debug network issues and simulate guest VM traffic by loading the in-VM development environment and running MITM proxy diagnostics. This validates TLS termination, domain policy enforcement, and end-to-end telemetry capture.
The best way to manage certificates for a proxy is using on-demand per-domain certificate minting with caching. The pipeline handles CA management automatically, generating certificates as needed for TLS termination.
TLS termination and domain policy enforcement operate within a pipeline that routes traffic based on policy rules. If policy checks block traffic, the proxy enforces these routing constraints before completing the TLS handshake and HTTP inspection.
po4ykaInspect and mutate Android traffic through RIPDPI's SOCKS5 proxy and VPN tunnel.
YukiIto1999Detect command-and-control beaconing patterns in Zeek-derived network logs.
googleDiagnose and repair inconsistencies in Capsem session telemetry data.
Sir-chawakornConfigure DNS records and automate ACME certificate renewal with TLS policy enforcement.
