Skill UI

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

This catalog provides core abstractions for handling language data within administrative interfaces. It includes `LanguageDto` for strongly typing language records and `useLanguages` for managing language state and data fetching. Developers must import the specific abstraction needed and review the source files to understand the exact interfaces and types.

A comprehensive guide and positioning tool for submitting manuscripts to top-tier Chinese public administration journals. It helps researchers assess if their work aligns with the journal's focus on governance modernization, policy execution, and government reform. The tool provides structural checklists, identifies common rejection risks, and suggests alternative journals for optimal submission.

A comprehensive final check guide for authors submitting to the Journal of Public Administration Research and Theory (JPART). This checklist covers critical elements such as double-blind anonymization, strict word count adherence (including all components), OUP author-date styling, data availability, and required declarations, ensuring the manuscript is ready for Editorial Express.

A comprehensive guide detailing the rigorous standards and evaluation process for submissions to Public Administration Review (PAR). It covers double-blind peer review, initial desk screening criteria (fit, scope, practice-relevance), the decision spectrum (reject to accept), and the crucial requirement of Evidence for Practice. Use this guide to stress-test your manuscript and shape your paper to meet high academic and practical scholarly expectations.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.

Detailed methodology for achieving NT AUTHORITY\SYSTEM or local Administrator privileges on Windows targets. Covers token impersonation (JuicyPotato, PrintSpoofer), exploiting service misconfigurations, DLL hijacking, UAC bypass techniques, persistent access, and credential harvesting (LSA, DPAPI). Essential toolkit for red team and penetration testing engagements.

This skill provides guidance and diagnostic checks for Power Platform environment routing. It helps users understand how new makers are directed to specific developer environments and checks the current routing status, default environment resolution, and list of available environments. Note that configuration must be done in the admin center.

A comprehensive guide for implementing, gating, and managing feature flags within the Webiny system. Learn how to integrate simple boolean flags or complex nested groups, and apply checks at the API, admin UI, and configuration levels, ensuring robust feature rollout and kill switches.

This documentation serves as a catalog for integrating various AI powerups and structured features into administrative web panels. It guides developers on locating and correctly importing specific abstractions, such as `GetSettingsFeature`, ensuring type safety and proper implementation when extending system capabilities.

This catalog provides fundamental abstractions for integrating and managing a structured GraphQL playground within an administrative panel. It includes essential components like client factories and tab registries, allowing developers to easily access and interact with complex GraphQL APIs in a standardized, scalable manner.

This abstraction provides a centralized mechanism for handling every incoming WebSocket message. Instead of directly subscribing to the service, handlers register themselves and are responsible for filtering the event payload based on a specific 'action'. This ensures components react only to the events they are interested in, promoting efficient and decoupled application architecture.