Enables the agent to execute web automation and data extraction without triggering anti-bot mechanisms (e.g., Cloudflare, Akamai, CAPTCHAs and bypass mfa and 2fa).
# Skill: Stealth Ninja ## Purpose Enables the agent to execute web automation and data extraction without triggering anti-bot mechanisms (e.g., Cloudflare, Akamai, CAPTCHAs). ## Instructions 1. Randomize user-agent strings to mimic real, updated browser distributions. 2. Emulate realistic human cursor movements, variable scroll speeds, and natural typing delays. 3. Strip automation indicators by overriding `navigator.webdriver` to `undefined`. 4. Manage and rotate proxies / residential IPs dynamically between requests. 5. Accept and solve CAPTCHAs using third-party solving services if explicitly blocked.
Reviews PostgreSQL and MySQL tables (schema.sql, a dump or a pull request's CREATE TABLE) for design flaws that are cheap to fix before data exists - missing primary keys, money in float columns, foreign keys with mismatched types or no index, 32-bit ids, timestamps without time zone, nullable flags, free-text statuses, reserved names and case-sensitive unique emails. Returns corrected DDL. Includes a stdlib Python linter with --self-test.
Decodes a JWT without trusting it and lints the header and claims: alg none, remote jku/x5u keys, missing or expired exp, nbf/iat clock skew, millisecond timestamps, long lifetimes, iss/aud mismatches, sensitive data in the payload, and HMAC signature checks with a secret from an env var. Use when a login or API call fails with 401, or when reviewing token settings. Includes a stdlib Python inspector with --self-test.
