Skill UI

This guide details how to install and configure the WebContainer API, enabling client-side Node.js execution directly in the browser. It also provides instructions for integrating the StackBlitz SDK, which is used for embedding highly interactive code editors into web applications. The guide covers necessary dependency installations, code examples, and crucial HTTP header configuration (COOP/COEP) required for cross-origin isolation and secure operation.

A comprehensive guide to setting up a local development loop for WebContainer applications. This setup utilizes Vite for a modern development environment, providing hot module replacement (HMR) and cross-origin policy configuration. It includes detailed steps for running Vitest tests, ensuring file system operations and browser-based IDE features function correctly in a simulated local environment.

Provides a comprehensive production checklist specifically for WebContainer applications built using the StackBlitz SDK. This guide helps developers ensure that their web applications are robust and ready for deployment by checking essential aspects like security headers, cross-browser compatibility, and necessary fallback mechanisms.

This skill provides the production-grade architectural blueprint for developing browser-based Integrated Development Environments (IDEs) and interactive playgrounds powered by WebContainers. It is essential for developers who are integrating the WebContainers API or utilizing the StackBlitz SDK to create robust, cloud-based development experiences.

This module provides multiple abstractions and hooks for interacting with the browser's LocalStorage API within an administrative context. It offers specialized utilities, including direct service access (LocalStorage instance) and advanced React hooks (useLocalStorage, useLocalStorageValues). These tools enable component developers to imperatively call services or efficiently observe single or multiple keys, ensuring consistent state management and proper re-rendering when local state changes.

A comprehensive guide for migrating and integrating with the Wispr Flow voice-to-text API. This skill details best practices for both WebSocket (low-latency streaming) and REST API methods. It covers authentication, optimal audio formatting (16kHz mono PCM), context awareness for specialized jargon (e.g., code), and robust error handling across multiple platforms (Mac, iOS, browser).

A browser-based skill for search, web scraping, login-required actions, and dynamic page interaction. Use it to access real websites, extract content, and operate pages in a live Chrome environment.

A tool that generates and opens a GitHub Pull Request (PR) dashboard in the browser. Users can specify precise criteria, including date ranges (e.g., 'last 7 days', 'this month') and specific roles (e.g., 'Authored by me', 'Requested reviews'), to view detailed PR activity. Requires GitHub CLI authentication for full functionality.

A comprehensive playbook covering advanced V8 and Chromium exploitation techniques. It details complex vulnerabilities such as JIT type confusion, incorrect bounds elimination, and pointer compression bypass. This guide is essential for understanding the mechanisms required to achieve renderer RCE and sandbox escape in modern browsers.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

A powerful technique used when full XSS is blocked by CSP, sanitizers, or WAFs, but HTML injection is possible. It leverages unclosed HTML tags (like <img> or <link>) to capture and exfiltrate sensitive page data (CSRF tokens, session IDs, form values) by forcing the browser to include the subsequent content in a request URL.

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.