Skill UI

This guide details comprehensive security best practices for Webflow Data API v2. It covers crucial topics such as selecting the correct token type, implementing least privilege access scopes, secure secret rotation, and verifying webhook signatures. Use this knowledge when building or auditing Webflow integrations to ensure robust data security and system reliability.

This module provides essential, standardized abstractions and hooks for managing navigation within a web administration panel. It includes components like LinkComponent and RouteLinkComponent, along with hooks such as useRouter and useRoute, allowing developers to easily structure routes, handle redirection, and manage client-side navigation state efficiently.

A comprehensive guide for developers on deploying, developing locally, and managing environments for Webiny serverless platform on AWS. Learn how to use `yarn webiny deploy` for multi-environment releases (dev, staging, prod), and how to leverage `yarn webiny watch` for local API (Lambda stubs) and Admin (React HMR) development, ensuring full-stack debugging capabilities.

Automates the end-to-end software release workflow for a GitHub repository. This skill handles Semantic Versioning (SemVer) version bumping, analyzes code changes by generating sophisticated diffs, and automatically creates a formatted changelog and release pull request. It relies exclusively on the GitHub CLI (gh) and Git for robust version control and deployment.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

A specialized CLI alias designed to implement the PUA P9 protocol, simulating the role of a P9 tech lead for AI coding assistance (Codex/Claude Code). This tool helps users structure complex development tasks by focusing on writing precise prompts, managing execution steps, and strictly adhering to a defined professional protocol, minimizing direct code implementation unless reassigned. It ensures rigorous process management and evidence-based output.

This CLI alias executes a comprehensive teardown protocol for PUA agents, designed for development environments. It safely releases all active agent and loop states, ensuring a clean system reset. It automatically manages configuration files like ~/.pua/config.json, preserving unknown fields while providing reliable, evidence-based cleanup.

A comprehensive toolkit for managing the entire lifecycle of feature flags, treating them as a controlled process rather than simple if-statements. This system provides scripts to scan for technical flag debt, plan progressive rollouts (e.g., ring, linear), and audit for crucial kill-switches. Ideal for release engineering, ensuring features are properly launched, tested, and safely retired.

This tool simulates a Chief Technology Officer's comprehensive review, stress-testing any major technical plan. It systematically interrogates critical areas including scaling limits (scaling cliffs), accumulated technical debt, team capacity planning, build-vs-buy economics, system reliability (SLOs), and security compliance. Use it before committing to core architecture changes or making high-stakes engineering decisions.

This comprehensive guide establishes the standards for a modern, minimalist, and highly functional design system. It defines foundational elements like typography, color tokens, and spacing scales, while strictly adhering to WCAG 2.2 AA accessibility. It provides structured workflows, detailed component rules, and quality gates for both designers and engineers to ensure consistent, usable, and aesthetically pleasing product experiences.

A throughput-first interrogation tool designed to pressure-test major engineering plans. It rigorously reviews six critical areas—including DORA metrics, cycle time, hiring funnel health, team structure, and production discipline—before committing to delivery milestones, hiring waves, or organizational changes.