Skill UI

A specialized scripting language for Makepad, enabling advanced dynamic UI generation, complex workflow automation, and rapid application prototyping. It supports asynchronous operations (HTTP requests, timers) and is designed for integrating sophisticated, AI-assisted logic into application workflows.

Provides architecture design support including ADR templates, system design checklists, scalability assessment prompts, architecture patterns, and API guidance so engineers can document decisions and ensure reliability during technical design phases.

A robust, production-grade REST API gateway designed to wrap ComfyUI servers. It provides comprehensive features including workflow templating, job queuing (with priorities), webhooks, result caching, authentication, and rate limiting. It transforms ComfyUI into a universal, scalable, and secure service for automated image generation pipelines.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

A powerful code review utility designed for SwiftUI projects. It comprehensively analyzes code quality, ensuring adherence to modern Swift APIs, optimal performance, robust data flow management, and compliance with Apple's Human Interface Guidelines and accessibility standards (like VoiceOver and Dynamic Type). Use this tool when writing, refactoring, or reviewing complex SwiftUI implementations to maintain high code hygiene and maintainability.

Helps founders, RevOps, and GTM engineers turn manual revenue processes into reliable, observable automation by mapping tech stacks, designing workflow architectures, and orchestrating AI agents across platforms like n8n, Make, and Zapier.

This skill utilizes the Microsoft Graph API to parse Office 365 Unified Audit Logs for security incident investigation. It is designed to detect critical indicators of account compromise, including the creation of suspicious email forwarding rules, unauthorized mailbox delegation changes, suspicious OAuth application consent grants, and other signs related to Business Email Compromise (BEC).

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

A specialized security testing skill designed to identify excessive data exposure in REST or GraphQL APIs, adhering to OWASP API3:2023 guidelines. It works by intercepting raw API responses and systematically comparing the returned data against what the frontend UI actually displays. This helps auditors detect leaked PII, internal identifiers, debug fields, or other sensitive business data that should have been filtered out by the endpoint response. Use cases include auditing microservice boundaries, assessing mobile API responses designed for multiple clients, and verifying proper respons...

This skill uses the Thinkst Canary REST API to programmatically deploy and monitor various tripwire mechanisms, including web bugs, DNS tokens, MS Word documents, and AWS API keys. It is designed for early breach detection by simulating attacker activity and generating comprehensive deception coverage reports and alert histories.

A comprehensive security assessment guide and script to test API rate limit vulnerabilities. It evaluates if an API's security controls can be bypassed using advanced techniques such as IP spoofing (manipulating X-Forwarded-For headers), HTTP method variations, and endpoint path traversal. Designed for penetration testing, it helps assess resilience against brute-force or resource exhaustion attacks, aligning with OWASP API Top 10 findings.

This tool performs comprehensive security testing on SOAP web services. It analyzes WSDL definitions to identify available methods and then tests for critical XML-related vulnerabilities, including XXE, XPath injection, XML bombs, and WS-Security bypass. It is designed for automated penetration testing of enterprise-level SOAP APIs.