Skill UI

Assess mobile backend APIs for authentication and authorization weaknesses, covering JWT/OAuth flaws, insecure token handling, session fixation, IDOR, and privilege escalation during penetration tests of mobile apps.

Probes WebSocket APIs for auth bypass, CSWSH, injection, DoS flooding, and info leakage by intercepting handshakes/messages with Burp Suite, crafting payloads, and scripting real-time assessments.

Describe how to wire tRPC routers, procedures, middleware, context, and Next.js integrations to deliver end-to-end type-safe TypeScript APIs with realtime subscriptions and shared client/server types.

Executes a structured VC valuation workflow that ingests SaaS or startup metrics, runs DCF, comparable revenue multiples, and SaaS health models via Python, and synthesizes a defensible valuation, runway, and capital-efficiency narrative for users planning fundraising or benchmarking.