What problem does it solve? During authorized security testing, manually reviewing every JavaScript file on a target site is slow and error-prone, and missing hidden API endpoints, hardcoded credentials, or admin routes means missing vulnerabilities. This Skill enforces a disciplined, full-coverage workflow for collecting and deeply analyzing all JS files so no endpoint or secret is overlooked. ## Core Features & Use Cases - Dual-channel JS collection: Combines automated crawler output with wayback machine URLs, HTML script tag extraction, and manual saves, then organizes files locally by domain. - Complete request signature extraction: For every fetch, axios, $.ajax, XMLHttpRequest, and GraphQL call, it captures method, URL, Content-Type, required/optional parameters, and authentication requirements into a structured _endpoint_params.json mapping table. - Secret, route, and interceptor mining: Extracts hardcoded API keys, JWT secrets, AES keys/IVs, SPA hash routes (Vue/React Router), and axios request interceptor logic that auto-injects tokens and signatures. - Use Case: While testing an authorized SPA target, run this workflow to download all JS chunks (including lazy-loaded admin bundles), extract 30+ API endpoints with parameter requirements, and hand the mapping table to downstream fuzzing and crypto-attack stages. ## Quick Start Ask the agent to perform full JS collection and deep analysis on the authorized target domain and produce the _endpoint_params.json endpoint-to-parameter mapping table.
