Skill UI

A comprehensive guide detailing Apple's Human Interface Guidelines (HIG) for building adaptive and consistent user interfaces. It covers best practices for layout architecture, navigation patterns (e.g., Tab Bars, Sidebars, Split Views), and component usage across multiple platforms, including iOS, iPadOS, macOS, and visionOS. Essential for developers aiming for a native, high-quality user experience.

A specialized skill designed for agents to proactively identify, analyze, and strategize high-impact contributions within trending Open Source repositories. It systematically performs repository discovery, extracts targeted issues (like 'help wanted' or 'good first issue'), and conducts deep feasibility analysis (including mergeability and complexity). Finally, it generates a structured 'Contribution Dossier' with actionable plans, significantly accelerating the process of becoming a top-tier OSS contributor.

Scans Substrate/Polkadot FRAME pallets for seven critical vulnerabilities such as arithmetic overflow, panic DoS, incorrect weights, unsigned validation issues, bad randomness, and origin flaws, making it ideal for runtime audits and pre-launch security assessments.

FluidSim is a Python-based CFD framework offering pseudospectral solvers (2D/3D Navier-Stokes, shallow water, stratified flows) with FFT, MPI, Pythran/Transonic acceleration, and rich output analysis for turbulence or geophysical studies.

This skill covers implementing robust API abuse detection using advanced rate-limiting algorithms like Token Bucket and Sliding Window. It uses Redis for distributed counting and allows for adaptive limits, dynamically tightening during detected attacks and relaxing during normal traffic. Ideal for securing APIs against DDoS, brute force, and scraping attacks.

This guide details how to implement robust Security Orchestration, Automation, and Response (SOAR) playbooks using Palo Alto XSOAR. It covers building automated, multi-stage incident response workflows (e.g., phishing, malware analysis, DDoS containment) by integrating various security tools. Use this when automating manual SOC tasks, structuring incident playbooks, or improving overall security posture and compliance.

This tool performs comprehensive security testing on GraphQL APIs by generating deeply nested, recursive, or highly repetitive queries. It specifically aims to identify Denial-of-Service (DoS) vulnerabilities and resource exhaustion issues by overwhelming the server's CPU, memory, or database connections. Essential for security auditors and penetration testers.

A comprehensive guide and code suite for performing penetration testing on real-time WebSocket APIs (WS/WSS). This tool assesses vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), missing handshake authentication, message injection, input validation failures, and DoS risks. It guides users through analyzing the handshake process and testing authorization enforcement using Python and specialized tools.

This library provides comprehensive patterns for building robust Clinical Decision Support Systems (CDSS) integrated into Electronic Medical Records (EMR). It ensures patient safety by implementing critical checks such as drug interaction screening, weight/age/renal-adjusted dose validation, and standardized clinical scoring (e.g., NEWS2). The engine uses pure functions, guaranteeing high testability and reliability for critical medical insights.

This guide teaches advanced search techniques for identifying specific video games. It emphasizes using highly discriminative technical details such as specific platforms (e.g., DOS, NES, PS4), distribution methods (shareware), game engines, era, and detailed review scores from niche sites. By combining multiple constraints (Platform + Era + Detail), users can dramatically narrow down search results, even locating specific developers or artists involved in the game's creation.

A comprehensive methodology for conducting deep security assessments and penetration tests against GraphQL APIs. This guide covers the entire attack lifecycle, including endpoint discovery, blind schema reconstruction, authentication/authorization bypass, SQL/NoSQL injection, Denial of Service (DoS) via depth bombs, and abusing advanced features like file uploads and subscriptions. It provides actionable steps and tool guidance for professional security researchers and ethical hackers.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.