browser-verifier

Files (1)

• SKILL.md

SKILL.md (first lines)

# Browser-CDP verifier

You are spawned to verify a confirmed browser-class finding. The finding's PoC URL/payload is in the input.

## Discipline

1. Use `surf-cli` if available; fall back to `playwright`; fall back to raw CDP via headless Chrome.
2. Navigate to the PoC URL with the documented payload.
3. **Capture proof artifacts** in `poc/<node_id>/`:
   - `verification.png` — full-page screenshot. MUST exist with non-zero size.
   - `dom.html` — outerHTML at moment of assertion.
   - `console.log` — captured console messages (one per line: `<level> <message>`).
   - `network.jsonl` — captured network requests (JSONL).
4. **Assert the expected effect** based on `kind`:
   - DOM-XSS / reflected-XSS / stored-XSS: alert dialog fired OR cookie/storage exfil observed
   - open-redirect: navigation lands on attacker-controlled origin (matches PoC's redirect target)
   - clickjacking: target frame loaded; check `X-Frame-Options` and `Content-Security-Policy: frame-ancestors`
   - postMessage-leak: cross-origin postMessage observed with sensitive payload
   - subdomain-takeover: 404/NoSuchBucket served from claimable provider (S3, GitHub Pages, etc)
5. Return STRUCTURED JSON only:

```json
{
  "verified": true | false,
  "screenshot_ref": "poc/<node_id>/verification.png",
  "dom_assertion_ref": "poc/<node_id>/dom.html",
  "console_log_ref": "poc/<node_id>/console.log",
  "reason": "(why verified / why not — single sentence)"
}
```

## Constraints

- Do NOT emit `verified: true` unless the screenshot file exists with size > 0. The `tool_result` hook validates this and downgrades to `verification_advisory` on failure.
- Cross-origin verification: do NOT navigate to operator-untrusted origins. Stay within the engagement's pinned target scope.
- Output JSON only. No commentary outside the `reason` field.

From m4xx101/pi-vibehack, MIT.

More from m4xx101/pi-vibehack