Skill UI

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

These extensions enable developers to customize the Shopify checkout experience using sandboxed, React-like components. They serve as the modern replacement for the deprecated checkout.liquid, allowing deep integration into the purchase flow. Use cases include adding custom data fields (metafields), rendering dynamic promotional banners, and reading real-time checkout state information.

This guide provides comprehensive steps for deploying Shopify applications (including extensions and functions) to various production cloud hosting platforms, such as Vercel, Fly.io, and Google Cloud Run. It covers critical aspects like environment configuration, setting up necessary webhooks, utilizing the Shopify CLI for deployment, and best practices for securely handling platform-specific secrets and ensuring production stability. Use this when moving a local Shopify app to a live e-commerce environment.

A comprehensive guide to implementing a production-ready Shopify app architecture using the Remix framework. This template covers ideal project structure, integrating Prisma for robust session storage, and implementing official Shopify patterns like Theme App Extensions and webhooks. Use this when starting a new e-commerce SaaS application on Shopify.

Provides comprehensive architectural guidelines for building scalable Webiny admin extensions. This pattern addresses separating business logic (headless features: UseCase/Repository/Gateway) from presentation logic (Presenters/Hooks/Components). It covers the standardized directory structure and layering necessary for creating robust, maintainable, and highly modular administrative interfaces.

This skill enables deep customization of the Webiny Admin UI. Developers can implement white-labeling (custom logos, titles, and theme colors), add highly specific custom columns to content entry list views, and create bespoke forms for various page types. It allows extending core components like dialogs, drawers, and the Lexical editor, making the admin panel fully branded and feature-rich.

This guide details how to extend the Webiny CLI by adding custom commands using the `CliCommandFactory` pattern. Developers can define command structures, handle typed parameters, and implement custom logic for various tasks, including data migration, code generation, deployment scripting, or system health checks. It covers command definition, parameter handling, and formatted terminal output using the `Ui` service.

This guide details how to integrate Auth0 as an external Identity Provider (IDP) for Webiny, replacing the default Cognito authentication. It involves creating an API config class to map Auth0's JWT claims to Webiny identities and implementing a React extension component. Users must set environment variables (AUTH0_ISSUER, AUTH0_CLIENT_ID) and register the necessary extensions for successful OIDC authentication flow.

This skill details the universal Dependency Injection (DI) pattern for Webiny web extensions. It is the foundational pattern used across all extension types (API, Admin, CLI, Infrastructure) to ensure type safety and automatic service provision. Learn how to use constructor injection, declare dependencies (like Logger, BuildParams, or CMS use-cases), and utilize the `createImplementation` factory to build robust, decoupled services.

This catalog provides five core abstractions (`Admin`, `Api`, `Cli`, `Infra`, `Project`) for structuring robust web applications. It ensures developers have standardized access points for managing different components like administrative interfaces, backend APIs, command-line tools, infrastructure configurations, and overall project logic. Developers must import the specific abstraction from the designated path.

This skill provides a standardized skeleton for building full-stack extensions that integrate both API services and Administration UIs. It defines the top-level component, shared domain layer, and mandatory entry-point registration patterns (<Api.Extension>, <Admin.Extension>) required for successful runtime deployment across different environments.

This skill provides a comprehensive framework for customizing and managing AWS cloud infrastructure using Pulumi handlers and declarative components. Developers can configure regions, apply resource tags, manage OpenSearch, set up VPC networks, deploy custom domains, and implement advanced blue-green deployment strategies. It fully supports environment-conditional configuration, ensuring robust infrastructure deployment across dev, staging, and production environments.