Skill UI

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

A comprehensive guide for configuring API access across distinct environments (Development, Staging, Production) for SaaS services. It details architectural patterns for separating workspaces, managing environment-specific secrets (e.g., using AWS Secrets Manager), and implementing environment guards to ensure code behaves correctly and securely in different stages of deployment. Ideal for CI/CD pipeline setup and robust client-side configuration.

A robust pattern for configuring API clients to interact with Linear across multiple isolated environments (Development, Staging, Production). This setup ensures that environment-specific credentials (API keys, webhooks) are securely loaded from secret managers (Vault, AWS, GCP) and implements environment guards to prevent accidental operations in the wrong environment. Ideal for professional CI/CD pipelines.

Assess web apps for client-side injection flaws, covering stored, reflected, and DOM XSS plus HTML injection, demonstrate session hijacking payloads, and guide validation and sanitization checks.

This comprehensive tool assesses critical security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. It systematically tests for common vulnerabilities like authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, and scope escalation. Ideal for penetration testers and security engineers evaluating the robustness of identity providers and client applications.

`jq` is the standard and powerful CLI tool for querying, filtering, and reshaping JSON data. This skill provides expert-level practical patterns for working with deeply nested structures, handling complex transformations (like flattening, renaming, and grouping), and integrating JSON logic into shell pipelines. Essential for parsing API outputs (AWS, GitHub), log files, and building robust Bash scripts.

This comprehensive guide provides step-by-step instructions for setting up a development environment to use AWS CDK (Cloud Development Kit) with Python. It covers installing prerequisites (Node.js, AWS CLI), initializing a CDK project, managing Python dependencies, and mastering the full deployment workflow, enabling users to define and deploy scalable AWS infrastructure as code.

A comprehensive guide and code pattern for configuring ClickHouse instances across development, staging, and production environments. It emphasizes best practices for infrastructure-as-code (IaC), secure secrets management (integrating AWS Secrets Manager, Vault, etc.), and ensuring environment-specific settings are correctly applied for reliable data analytics pipelines.

This guide provides a comprehensive strategy for configuring ClickUp API access across development, staging, and production environments. It emphasizes the critical importance of environment isolation using separate API tokens and dedicated workspaces to prevent data leaks and accidental destructive operations in live environments. Includes best practices for secret management (Vault, AWS, GCP) and implementing environment guards.

This guide details how to securely configure Notion integrations for separate development, staging, and production environments. It emphasizes using environment-aware client factories, dedicated tokens, and integrating with robust secret managers (AWS Secrets Manager, GCP Secret Manager, HashiCorp Vault) to ensure strict data isolation and adhere to least-privilege principles across all deployment tiers.

This guide provides a comprehensive workflow for configuring and managing Salesforce integrations across multiple environments, including Development, various Sandboxes (QA, Staging), and Production. It covers best practices for environment-specific credential handling, utilizing secrets managers (Vault, AWS/GCP), and establishing robust CI/CD deployment promotion flows using Salesforce CLI and code examples.

This skill allows users to query the current state of various AWS resources (including EC2, S3, Lambda, RDS, VPC, etc.) using natural language. It translates user intent into strictly read-only AWS CLI commands (e.g., `describe-*`, `list-*`). Crucially, this tool can only view data and is contractually incapable of performing any write, modify, delete, or mutation actions, ensuring maximum safety.