← All skills
caido-mode
67 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By dreadnode/capabilities (GitHub) · security · 22 stars · scanned at commit 3ceeb34
Full Caido TypeScript SDK CLI (the official @caido/sdk-client / caido-ts library). Search HTTP history with HTTPQL, test with curl proxied through Caido (caching auth in reusable static curl config files), add match & replace (tamper) rules, manage findings/scopes/filters/environments, and organize handoffs into named replay sessions and collections. Use for rich write-side Caido automation (M&R rules, replay handoff, curl-through-Caido) that the lightweight caido-sdk (Python) and caido-proxy (…
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: target.com
The author does not mention this. Expected for a security skill.
Found in 18 places.
Show 15 more
- capabilities/web-security/skills/caido-mode/SKILL.md, line 106
+ cookies), then probe with `curl -K auth.cfg "$BASE/path"`. **All traffic must go through - capabilities/web-security/skills/caido-mode/SKILL.md, line 130
for your internal testing only; never hand them a `curl -K /tmp/…` line. - capabilities/web-security/skills/caido-mode/SKILL.md, line 152
curl -K /tmp/caido/target.com/auth.cfg "$BASE/api/user/999" # IDOR - capabilities/web-security/skills/caido-mode/SKILL.md, line 153
curl -K /tmp/caido/target.com/auth.cfg -X POST "$BASE/api/profile" \ - capabilities/web-security/skills/caido-mode/SKILL.md, line 185
`curl -K auth.cfg -X POST "$BASE/path" -H 'Content-Type: application/json' --data-binary @body`. - capabilities/web-security/skills/caido-mode/SKILL.md, line 207
rotate per action, fetch fresh: `T=$(curl -sK auth.cfg "$BASE/csrf" | jq -r .token)`. - capabilities/web-security/skills/caido-mode/SKILL.md, line 209
`Authorization`/cookies on all proxied traffic — then `curl -x <proxy> -k "$BASE/path"` needs no - capabilities/web-security/skills/caido-mode/SKILL.md, line 224
to run it through their own Caido. **Never hand the user a `curl -K /tmp/...` line** — that file - capabilities/web-security/skills/caido-mode/SKILL.md, line 400
`curl -x <proxy> -k "$BASE/path"` is authenticated with no `-K`/headers at all. - capabilities/web-security/skills/caido-mode/SKILL.md, line 620
snapshot of ALL auth headers + inline cookies). Test with `curl -K auth.cfg "$BASE/path"`. - capabilities/web-security/skills/caido-mode/caido-client.ts, line 176
--config Instead, write a reusable curl -K config for INTERNAL - capabilities/web-security/skills/caido-mode/caido-client.ts, line 374
--proxy <addr> Caido proxy for curl -x (defaults to the Caido URL) - capabilities/web-security/skills/caido-mode/caido-client.ts, line 389
curl -x http://127.0.0.1:8080 -k 'https://target.com/api/user/999' -H 'Cookie: ...' - capabilities/web-security/skills/caido-mode/lib/commands/info.ts, line 61
console.log(`Proxy (curl -x): ${resolveProxy()}`); - capabilities/web-security/skills/caido-mode/lib/commands/requests.ts, line 371
usage: `curl -K ${cfgPath} "${built.base}/path"`,
Downloads and installs other software
The author does not mention this.
Found in 149 places.
Show 17 more
- capabilities/web-security/skills/caido-mode/README.md, line 60
npx tsx caido-client.ts setup <pat-a> http://localhost:8080 - capabilities/web-security/skills/caido-mode/README.md, line 61
npx tsx caido-client.ts setup <pat-b> http://localhost:8081 - capabilities/web-security/skills/caido-mode/README.md, line 62
CAIDO_URL=http://localhost:8081 npx tsx caido-client.ts recent --compact - capabilities/web-security/skills/caido-mode/README.md, line 86
All commands output JSON. Run `npx tsx caido-client.ts --help` for the complete list. - capabilities/web-security/skills/caido-mode/README.md, line 92
npx tsx caido-client.ts search 'req.method.eq:"POST" AND resp.code.eq:200' - capabilities/web-security/skills/caido-mode/README.md, line 93
npx tsx caido-client.ts search 'req.host.cont:"api"' --limit 50 - capabilities/web-security/skills/caido-mode/README.md, line 94
npx tsx caido-client.ts search 'req.host.cont:"api"' --recent --compact # newest first, terse - capabilities/web-security/skills/caido-mode/README.md, line 97
npx tsx caido-client.ts recent --limit 10 --compact - capabilities/web-security/skills/caido-mode/README.md, line 100
npx tsx caido-client.ts get <request-id> - capabilities/web-security/skills/caido-mode/README.md, line 103
npx tsx caido-client.ts get-response <request-id> - capabilities/web-security/skills/caido-mode/README.md, line 106
npx tsx caido-client.ts raw <request-id> --out /tmp/caido/target.com/body.json - capabilities/web-security/skills/caido-mode/README.md, line 115
npx tsx caido-client.ts search 'req.host.cont:"target.com" AND req.path.cont:"/api/user"' --recent --compact - capabilities/web-security/skills/caido-mode/README.md, line 117
npx tsx caido-client.ts export-curl 8431 --config - capabilities/web-security/skills/caido-mode/README.md, line 128
npx tsx caido-client.ts export-curl 8431 # full, portable curl command for the user - capabilities/web-security/skills/caido-mode/README.md, line 139
npx tsx caido-client.ts edit <id> --path /api/user/999 --name "IDOR victim 999" - capabilities/web-security/skills/caido-mode/README.md, line 142
npx tsx caido-client.ts edit-session "IDOR victim 999" --body '{"role":"admin"}' --nonach - capabilities/web-security/skills/caido-mode/README.md, line 143
npx tsx caido-client.ts edit <id> --set-header "X-Forwarded-For: 127.0.0.1" --session "IDOR victim 999" --new-name "XFF bypass"
and 129 more places
Changes files outside its own folder
The author does not mention this.
Found in 1 place.
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 17 places.
Show 14 more
- capabilities/web-security/skills/caido-mode/SKILL.md, line 220
npx tsx caido-client.ts export-curl 8431 # full curl, all headers inline (portable PoC) - capabilities/web-security/skills/caido-mode/SKILL.md, line 235
npx tsx caido-client.ts auth-status # prints "proxy": "http://localhost:8080" - capabilities/web-security/skills/caido-mode/SKILL.md, line 255
npx tsx caido-client.ts setup <your-pat> - capabilities/web-security/skills/caido-mode/SKILL.md, line 279
npx tsx caido-client.ts setup <pat-a> http://localhost:8080 - capabilities/web-security/skills/caido-mode/SKILL.md, line 294
npx tsx caido-client.ts search 'req.method.eq:"POST" AND resp.code.eq:200' --compact - capabilities/web-security/skills/caido-mode/SKILL.md, line 325
npx tsx caido-client.ts create-session 8431 --name "IDOR /api/user/:id" - capabilities/web-security/skills/caido-mode/SKILL.md, line 341
npx tsx caido-client.ts edit 8431 --path /api/user/999 --name "IDOR victim 999" # new session - capabilities/web-security/skills/caido-mode/SKILL.md, line 356
npx tsx caido-client.ts get-session "IDOR victim 999" --compact # session + its active entry - capabilities/web-security/skills/caido-mode/SKILL.md, line 372
npx tsx caido-client.ts collections # query first - capabilities/web-security/skills/caido-mode/SKILL.md, line 388
npx tsx caido-client.ts create-session 8431 --name "1. login" --collection "Vuln chain - IDOR to ATO" - capabilities/web-security/skills/caido-mode/SKILL.md, line 425
npx tsx caido-client.ts test-mr-rule --section req-header --operation add \ - capabilities/web-security/skills/caido-mode/SKILL.md, line 524
npx tsx caido-client.ts findings --limit 50 - capabilities/web-security/skills/caido-mode/SKILL.md, line 532
npx tsx caido-client.ts create-scope "Target" --allow "*.target.com" --deny "*.cdn.target.com" - capabilities/web-security/skills/caido-mode/SKILL.md, line 540
npx tsx caido-client.ts create-automate-session 8431 # configure payloads in UI, then: fuzz <session-id>
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'caido-mode' ] || [ -L ~/.agents/skills/'caido-mode' ]; then echo 'A skill folder named caido-mode already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/dreadnode/capabilities' "$d" && git -C "$d" checkout --quiet '3ceeb34c0c33dc36738cf0d4ec86e38b53d98216' -- 'capabilities/web-security/skills/caido-mode' && mkdir -p ~/.agents/skills && cp -R "$d"/'capabilities/web-security/skills/caido-mode' ~/.agents/skills/'caido-mode' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'caido-mode' ~/.claude/skills/'caido-mode' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for dreadnode/capabilities shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/dreadnode/capabilities/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | 3ceeb34 | 67 |