Skill UI

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

These extensions enable developers to customize the Shopify checkout experience using sandboxed, React-like components. They serve as the modern replacement for the deprecated checkout.liquid, allowing deep integration into the purchase flow. Use cases include adding custom data fields (metafields), rendering dynamic promotional banners, and reading real-time checkout state information.

This guide provides comprehensive steps for deploying Shopify applications (including extensions and functions) to various production cloud hosting platforms, such as Vercel, Fly.io, and Google Cloud Run. It covers critical aspects like environment configuration, setting up necessary webhooks, utilizing the Shopify CLI for deployment, and best practices for securely handling platform-specific secrets and ensuring production stability. Use this when moving a local Shopify app to a live e-commerce environment.

A comprehensive guide to implementing a production-ready Shopify app architecture using the Remix framework. This template covers ideal project structure, integrating Prisma for robust session storage, and implementing official Shopify patterns like Theme App Extensions and webhooks. Use this when starting a new e-commerce SaaS application on Shopify.

This guide outlines robust architectural patterns for building complex administrative extensions within a React environment. It enforces strict separation of concerns by dividing logic into two main layers: Headless Features (business logic, using UseCase/Repository/Gateway) and Presentation Features (UI components, Presenters, and hooks). Following these patterns ensures highly maintainable, testable, and scalable codebases, promoting clean architecture principles for web applications.

A comprehensive skill for developers needing to deeply customize the Webiny Admin UI. Features include white-labeling (changing logos, themes, and titles), adding custom columns to content entry lists, and developing custom forms for Website Builder page types. It covers advanced React components like AdminConfig, ContentEntryListConfig, and custom form validation.

This skill provides a detailed guide on extending the Webiny Command Line Interface (CLI) by implementing custom commands. It utilizes the `CliCommandFactory` pattern to define structured commands, manage typed parameters, and execute complex logic. Use cases include automating data migrations, generating boilerplate code, executing custom deployment workflows, and performing CMS content exports.

This guide details how to integrate Auth0 as an external Identity Provider (IDP) for Webiny, replacing the default Cognito authentication. It involves creating an API config class to map Auth0's JWT claims to Webiny identities and implementing a React extension component. Users must set environment variables (AUTH0_ISSUER, AUTH0_CLIENT_ID) and register the necessary extensions for successful OIDC authentication flow.

This guide explains the universal Dependency Injection (DI) pattern used across all Webiny extensions (API, Admin, CLI, Infrastructure). It details how to correctly implement constructor injection using the `dependencies` array to access core services like Logger, BuildParams, CMS use-cases, and IdentityContext. Mastering this pattern is crucial for building maintainable, type-safe, and cohesive Webiny extensions.

This module provides essential architectural abstractions for structuring complex applications using the Webiny framework. It defines core types for various system components, including Admin panels, APIs, Command Line Interfaces (CLI), Infrastructure management, and Project logic. Developers must utilize these imported abstractions to ensure strict type safety and clear separation of concerns in their code.

Provides a standardized and robust skeleton for developing full-stack extensions that integrate both a backend API service and a frontend Admin UI. This pattern enforces clear separation of concerns, utilizing shared domain layers for data consistency while ensuring that API and Admin code are correctly registered using specific entry points. Ideal for complex applications requiring unified management interfaces and robust backend logic.

This skill provides a powerful mechanism for modifying and extending AWS infrastructure using Pulumi handlers and dedicated declarative components. It allows developers to manage complex cloud setups, including configuring OpenSearch, VPC networking, resource tagging, custom domains, blue-green deployment strategies, and implementing environment-conditional configurations (e.g., production vs. development).