patt-fetcher

Fetch and index payloads from PayloadsAllTheThings by category.

Updated Apr 23, 2026
One-click install
npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill patt-fetcher
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: patt-fetcher
Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/patt-fetcher
Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill patt-fetcher

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Fetches and indexes payloads from PayloadsAllTheThings on demand for live payload enrichment.

Core Features & Use Cases

  • On-demand retrieval of payloads across multiple categories for rapid enrichment during security testing and demonstrations.
  • Provides first-pass payloads for testing workflows and can be integrated into executor prompts for live enrichment.
  • Use Case: During a security assessment, pull relevant payload examples for SQL Injection, XSS, or SSRF without leaving the workflow.

Quick Start

Invoke the fetch operation for a chosen category to retrieve and enrich your payloads immediately.

Frequently Asked Questions about patt-fetcher

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fetch payloads on demand for security research and pentest workflows?

To fetch payloads on demand, you can invoke a retrieval operation that maps your payload category to a URL, web-fetches the raw resource, extracts the relevant section, and returns the results for immediate use in security testing.

What is live payload enrichment and when do I need it during a pentest?

Live payload enrichment dynamically retrieves relevant injection examples, such as SQLi or XSS strings, during an active assessment. You need it when rapid testing requires pulling specific payload categories without interrupting your workflow.

Can I retrieve specific payload categories like SQL Injection or SSRF from PayloadsAllTheThings?

Yes, you can retrieve specific payload categories like SQL Injection or SSRF. The system maps the chosen category to the corresponding PayloadsAllTheThings resource, fetches the raw data, and extracts the relevant section.

How do I integrate on-demand payload retrieval into an executor prompt for live enrichment?

You can integrate on-demand payload retrieval by invoking the fetch operation within your executor prompt. This allows the workflow to dynamically call the system, retrieve the requested payload category, and return the extracted results directly.

Are there limitations to fetching payloads from PayloadsAllTheThings for security testing?

The primary limitation is that retrieval is restricted to the payload categories available within the PayloadsAllTheThings repository. The fetch operation only extracts the relevant section from the raw resource mapped to the requested category.

Does patt-fetcher work without external dependencies for web-fetching payloads?

Yes, patt-fetcher operates without external dependencies. It implements its own workflow to map the payload category to a URL, web-fetch the raw resource, extract the relevant payload section, and return the results to the caller.