/intercept

HTTP sniffer for tandem's Chrome via CDP: captures request+response bodies (including HttpOnly, CSRF tokens, private APIs). Subcommands: start, show, clear, count.

bgmacris@bgmacris

GitHub

From plugin

quimera-ai

116 skills1 agent6 commands

Install

$ npx -y skills add bgmacris/quimera-ai --agent claude-code

How it fires

How this command gets triggered: by you, by Claude, or both.

Fires itselfClaude auto-loads it when your prompt matches the work.
You can call itInvoke it directly when you want it.
Slash command/intercept

Context preview

What this command does when you run it.

HTTP sniffer for tandem's Chrome via CDP: captures request+response bodies (including HttpOnly, CSRF tokens, private APIs). Subcommands: start, show, clear, count.

Command definition

intercept.md

description: "HTTP sniffer for tandem's Chrome via CDP: captures request+response bodies (including HttpOnly, CSRF tokens, private APIs). Subcommands: start, show, clear, count."
allowed-tools: Bash(tandem-intercept *)

tandem HTTP sniffer (CDP):

!`tandem-intercept $ARGUMENTS`

**Typical pentest flow:** 1. `/tandem:intercept start` — start capturing (Ctrl-C to stop, or `--duration <s>`) 2. Navigate / interact with the app in the shared Chrome 3. `/tandem:intercept show --body` — show all with bodies 4. `/tandem:intercept show --url /api/ --status 2xx --body` — filter by path and status 5. `/tandem:intercept clear` — clear the log when done

⚠ The log may contain credentials and tokens — clear when done.

Read it on GitHub ↗

Ships withquimera-ai

A Claude Code plugin marketplace by bgmacris. One plugin today — tandem: a Chrome browser shared in real time between you and Claude Code.

Get the whole plugin, auto-invoked

Stats

JavaScript GitHub Playwright Anthropic MCP

Stars

Views

Forks

Active

Maintenance