Skill UI

Provides automated guidance for setting up responsive breakpoint analysis, follows frontend best practices, validates configurations, and supports React/Vue/CSS accessibility and performance scenarios.

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

Apply a rigorous coding standard by explicitly stating assumptions, avoiding unsupported claims, and covering both happy and unhappy paths before writing or reviewing code to ensure reliability.

Execute controlled chaos experiments to proactively test system resilience, fault tolerance, and recovery capabilities. This toolkit simulates real-world failures, such as network latency, service crashes, resource exhaustion, and dependency outages, ensuring that microservices degrade gracefully and recover automatically. It is essential for modern distributed systems validation.

Provides a comprehensive guide and framework for executing end-to-end (E2E) tests. It simulates real user interactions across the entire application stack, covering browser UI, API calls, and database operations. The guide details best practices like implementing the Page Object Model (POM), configuring multi-browser environments (Playwright, Cypress, Selenium), and establishing robust error handling mechanisms to ensure high application stability and quality.

Creates and executes load tests with tools like k6, JMeter, or Artillery to validate application performance under baseline, stress, spike, or scalability scenarios while defining thresholds and providing execution guidance.

Provides comprehensive guidance for setting up and configuring Static Application Security Testing (SAST) tools, including Semgrep, SonarQube, and CodeQL. Learn how to integrate security scanning into CI/CD pipelines, define custom security rules, enforce quality gates, and manage compliance policies to proactively identify and remediate code vulnerabilities across multiple programming languages.

A comprehensive skill set for mastering enterprise-grade Scala development. Expertise covers functional programming, distributed systems, and big data processing using technologies like Pekko, Akka, Spark, ZIO, and Cats Effect. Ideal for designing and implementing resilient, scalable microservices based on Domain-Driven Design principles.

This comprehensive tool validates web applications against WCAG 2.1/2.2 accessibility standards. It combines automated scanning using industry-leading tools (like axe-core, Lighthouse) with crucial manual checks for keyboard navigation, ARIA implementation, and color contrast. It is essential for QA teams and developers who must ensure high usability and accessibility for all users, including those relying on screen readers.

A comprehensive tool for detecting critical API security vulnerabilities, including injection, broken authentication (BOLA), excessive data exposure, and mass assignment. It audits endpoints against the OWASP API Security Top 10 standards by analyzing source code, middleware chains, and request validation logic. Ideal for pre-deployment security gates, CI/CD integration, and compliance audits.

Scans container images and running containers using Trivy and Snyk to identify vulnerabilities, rank them by severity, and return remediation guidance whenever users ask for a security assessment before or after deployment.

Conducts detailed accessibility audits for web apps via the accessibility-test-scanner plugin, verifying WCAG 2.1/2.2 compliance, ARIA usage, keyboard navigation, and screen reader compatibility while providing remediation guidance when accessibility or compliance checks are requested.