Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/caido-community/caido-plugin-skill/caido-plugin-devnpx skills add caido-community/caido-plugin-skill --skill caido-plugin-devgit clone --depth 1 https://github.com/caido-community/caido-plugin-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/caido-community/caido-plugin-skill/caido-plugin-dev)<a href="https://agentmods.dev/skills/caido-community/caido-plugin-skill/caido-plugin-dev"><img src="https://agentmods.dev/badge/skills/caido-community/caido-plugin-skill/caido-plugin-dev.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00053 | $0.10933 |
| Opus 5 | $0.00026 | $0.05466 |
| Sonnet 5 | $0.00011 | $0.02187 |
| Haiku 4.5 | $0.00005 | $0.01093 |
Grade A, and why
caido-plugin-dev scanned grade A with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLlowData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
const response = await fetch("https://api.example.com/data", { method: "POST", Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
const request = await sdk.requests.get(requestId); Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
import { spawn } from 'child_process'; How it starts
The opening of the file, as written. The whole thing — 1,754 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Caido Plugin Development
Overview
Caido is a lightweight web security auditing toolkit designed for penetration testing and vulnerability assessment. This skill provides comprehensive guidance for developing Caido plugins using the official SDK ecosystem.
Key Resources:
- Main Docs: https://docs.caido.io/
- Developer Docs: https://developer.caido.io/
- LLM-Optimized Docs (Full): https://developer.caido.io/llms-full.txt
- LLM-Optimized Docs (Summary): https://developer.caido.io/llms.txt
- Community GitHub: https://github.com/caido-community
About Caido
Caido is a modern web security auditing platform similar to Burp Suite, designed for penetration testers and security researchers. It operates on a client-server architecture and can run locally or on remote instances (VPS, Docker, cloud).
Core Architecture
- Client-Server Model: Supports both desktop application and CLI deployment
- Technology Stack: Vue.js frontend, Rust backend, GraphQL API
- Data Storage: SQLite database for persistent project data
- Proxy System: HTTP/HTTPS traffic interception with dynamic certificate generation
Main Features and Tabs
Understanding Caido's core features is essential for plugin development, as plugins often extend or integrate with these existing capabilities:
Proxy & Traffic Management:
- Intercept: Real-time request/response interception and modification - users can pause, inspect, and modify HTTP traffic before it's sent or received
- HTTP History: Complete log of all proxied traffic with filtering and search capabilities
- Search: Advanced searching across all captured traffic using HTTPQL query language
- Sitemap: Visual tree representation of discovered URLs and application structure
Testing and Automation:
- Replay (Repeater): Manual request crafting and modification tool - send and resend individual HTTP requests with custom modifications, similar to Burp's Repeater
- Automate: Fuzzing and automated testing capabilities - run payloads against endpoints, brute-force attacks, parameter testing
- Workflows: Multi-step automation sequences that can be passive (automatic analysis) or active (user-triggered)
- Match & Replace: Automatic request/response modification rules that apply to all traffic
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 1,754 lines · 53 tokens per session scan A 147e70ef59e2
caido-plugin-dev is a skill published in the GitHub repository caido-community/caido-plugin-skill (23 stars, last pushed 9mo ago), licensed CC0-1.0. It adds 53 tokens to every session and 10,933 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 3 findings (sends data to an external url, makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
caido-mode
Full Caido SDK integration for Claude Code. Search HTTP history with HTTPQL, test with curl proxied through Caido (caching auth in reusable static curl config files), add match & replace rules, and organize handoffs into named replay sessions and collections - all via the official @caido/sdk-client. PAT auth…
myslide
Create professional AWS-themed PowerPoint presentations with dark gradient backgrounds, AWS brand colors, and rich visual elements (SVG diagrams, architecture diagrams, icons). Uses the official AWS reInvent 2023 template design system. Supports creating from scratch, editing specific slides conversationally, and…
account-status
Generate a account status report by taking an account name, analyze spend trends and AWS account mappings, create an HTML report, render chart image for email compatibility, ask recipient email after report completion, and send immediately without reconfirmation. All analysis and email narrative must be in Korean.
memory-manager
Comprehensive memory management for agents. Use when working with memory files (MEMORY.md, memory/.md), searching historical context, managing daily logs, or organizing long-term knowledge. Includes memorysearch and memoryget tools,file management utilities, and best practices for curating agent memory.
source-management
Manages connected MCP sources for enterprise search. Detects available sources, guides users to connect new ones, handles source priority ordering, and manages rate limiting awareness.
retrieve
Search a knowledge base using Amazon Bedrock RAG (Retrieval-Augmented Generation). Use when users want to find information from uploaded documents, ask questions about stored knowledge, or retrieve relevant content from the knowledge base. Returns matched content with source references and URLs.