yakit-hotpatch-skill

To write a beforeRequest hook for Yakit Web Fuzzer hotpatch, you return the modified HTTP request object directly. The Skill guides AI to generate these hooks for dynamic runtime injection during your fuzzing runs.

The best way to extract response data during web fuzzing is implementing the mirrorHTTPFlow hook. This Skill provides API references to generate code that captures and processes specific values from HTTP responses on the fly.

Yes, you can generate dynamic payloads using custom fuzztag functions in Yakit. The Skill guides AI to write {{yak(...)}} and dynamic dyn tags for on-the-fly payload generation during your fuzzing runs.

Yes, Yakit Web Fuzzer supports mock responses and retry logic. The Skill covers mockHTTPRequest and retryHandler APIs, enabling you to generate hotpatch code for custom failure checking and automated request retries.

To bypass CSRF tokens and parameter signing when fuzzing, use beforeRequest and afterRequest hooks. The Skill guides AI to generate hotpatch code that dynamically injects valid tokens and signatures into requests at runtime.

No external dependencies are required to generate Yakit hotpatch code. The Skill only needs a SKILL.md file with frontmatter defining name and description, and optionally references scripts, references, and assets directories to load supporting content.