Skill UI

This guide outlines a sophisticated development workflow using dedicated subagents for each independent task within a plan. It mandates a two-stage review process—first for specification compliance, then for code quality—ensuring highly reliable, high-quality, and rapidly iterative development cycles while maintaining strict context isolation.

A comprehensive guide for building high-performance GraphQL servers using Golang. This skill covers everything from choosing between gqlgen and graphql-go, designing robust schemas (nullability, pagination), implementing clean resolver patterns, and critically, preventing N+1 database query issues using DataLoaders. Essential for backend engineers building enterprise-grade APIs.

This skill creates a comprehensive, three-column documentation page in pure HTML. It is ideal when the brief requires a professional "guide," "tutorial," or "API reference." It includes structured elements like a sticky left navigation sidebar, a main article body, and a dynamic right Table of Contents, ensuring technical content is highly readable and navigable.

This comprehensive playbook guides security testers through deep API authorization checks, focusing specifically on BOLA (Broken Object Level Authorization) and BFLA (Broken Function Level Authorization). Use this skill to test scenarios where object identifiers, nested resources, or privileged functions are exposed, ensuring thorough checks for mass assignment and privilege escalation.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

An expert playbook for systematically testing Insecure Direct Object References (IDOR) and Broken Object/Function Level Authorization (BOLA/BFLA). This guide covers finding object identifiers across all request vectors (URL, body, headers, cookies), implementing A-B testing methodologies, identifying various ID patterns, and executing horizontal or vertical privilege escalation attacks. Essential for deep API security auditing.

This router serves as the initial guide for comprehensive security assessments on new targets or unknown attack surfaces. It helps users map the scope, discover hidden assets, perform detailed technology fingerprinting, build endpoint inventories, and strategically plan the optimal testing path before diving into specific vulnerability checks (e.g., API, Auth, Injection).

This guide details how to configure SMTP email delivery settings within a Webiny project using the `<Api.Mailer.Smtp />` component. It specifies the required properties (host, port, user, etc.) and emphasizes best practices, such as passing sensitive passwords via environment variables rather than hard-coding them. Ideal for developers setting up external email services.

This guide outlines architectural patterns and best practices for building scalable, production-ready APIs with FastAPI. It covers proper project structure, separating concerns using routers, services, and CRUD layers, implementing dependency injection for database sessions and authentication, defining Pydantic schemas for request/response, handling asynchronous operations, and managing custom error responses.

This guide provides comprehensive, structured error handling patterns for modern applications using TypeScript, Python, and general architectural principles. It covers essential concepts like typed custom errors, Result patterns, API error transformers, and React Error Boundaries. Learn how to implement fail-fast mechanisms, differentiate user-facing messages from developer logs, and ensure system resilience against unexpected failures.

A comprehensive guide and toolkit for performing End-to-End (E2E) testing on native Windows desktop applications (WPF, WinForms, Win32, Qt) using pywinauto and the Windows UI Automation (UIA) API. Covers setup, locator strategies, and page object modeling for robust desktop automation.