Security checks across malware telemetry and agentic risk
This skill openly automates CAPTCHA solving and token injection on live websites, which is a powerful bypass capability that needs careful user review.
Install or use this only for sites you own, administer, or have explicit permission to test. Use a dedicated CapMonster API key with spending limits, avoid sensitive or internal URLs, and require manual approval before sending challenge data externally, injecting tokens, invoking callbacks, or submitting any live form.
### Step 3: Submit to CapMonster API **Using curl (shell):** ```bash # Create task
# Create task
echo "Creating task..."
RESPONSE=$(curl -s -X POST https://api.capmonster.cloud/createTask \
-H "Content-Type: application/json" \
-d "{
\"clientKey\": \"$API_KEY\",# Create task
echo "Creating task..."
RESPONSE=$(curl -s -X POST https://api.capmonster.cloud/createTask \
-H "Content-Type: application/json" \
-d "{
\"clientKey\": \"$API_KEY\",# Create task
echo "🔄 Creating task for: $WEBSITE_URL"
RESPONSE=$(curl -s -X POST https://api.capmonster.cloud/createTask \
-H "Content-Type: application/json" \
-d "{
\"clientKey\": \"$API_KEY\",# Poll for result
echo -n "⏳ Waiting for solution"
for i in {1..60}; do
RESULT=$(curl -s -X POST https://api.capmonster.cloud/getTaskResult \
-H "Content-Type: application/json" \
-d "{\"clientKey\": \"$API_KEY\", \"taskId\": $TASK_ID}")# Create task
echo "🔄 Creating task for: $WEBSITE_URL"
RESPONSE=$(curl -s -X POST https://api.capmonster.cloud/createTask \
-H "Content-Type: application/json" \
-d "{
\"clientKey\": \"$API_KEY\",# Poll for result
echo -n "⏳ Waiting for solution"
for i in {1..60}; do
RESULT=$(curl -s -X POST https://api.capmonster.cloud/getTaskResult \
-H "Content-Type: application/json" \
-d "{\"clientKey\": \"$API_KEY\", \"taskId\": $TASK_ID}")66/66 vendors flagged this skill as clean.