Skill UI

A comprehensive index of 46 production-grade test automation skills, covering E2E, unit, mobile, BDD, and cloud testing across 15+ languages. This skill equips AI coding assistants to act as senior QA architects, generating structured, real-world test code for major frameworks like Playwright, Selenium, Cypress, and Jest. It supports project setup, CI/CD integration, and cross-platform debugging.

Shipwright is an autonomous, multi-phase agent designed to convert simple, plain-English requirements into fully functional, tested, and deployment-ready applications. It supports modern full-stack frameworks like Next.js/Supabase, SvelteKit, and Astro. Use this tool when you need to scaffold a complete project, add complex features, or generate an entire SaaS dashboard merely by describing it.

A comprehensive toolset for Go developers to generate accurate and complete OpenAPI/Swagger documentation. It utilizes annotation comments (@Summary, @Param, @Security, etc.) to define API contracts, making the Swagger UI the source of truth. Supports various popular Go frameworks (Gin, Echo, Fiber, net/http) and handles complex security definitions like JWT, Bearer, and OAuth2, ensuring maintainable and standardized API documentation.

An expert guide covering advanced exploitation techniques for Expression Language (EL) injection across multiple Java frameworks, including Spring (SpEL), Struts2 (OGNL), and JSP/JSF (Java EL). Details detection methods, sandbox bypasses, and real-world CVE chains for Remote Code Execution (RCE).

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

HTTP Parameter Pollution (HPP) occurs when a single request contains multiple instances of the same parameter key. Different components in the request path (e.g., WAFs, proxies, application frameworks) may parse these duplicate keys using different rules (first value, last value, array join). This skill teaches how to exploit these discrepancies to bypass security checks, execute SSRF, or manipulate business logic.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

A comprehensive toolkit providing source generators and base classes for implementing the Model-View-ViewModel (MVVM) pattern in .NET applications. It simplifies the creation of observable properties, commands, and validation logic, significantly reducing boilerplate code. Supports major cross-platform UI frameworks including WPF, WinUI 3, MAUI, and Avalonia.

This skill automatically generates comprehensive unit tests based on provided source code. It supports multiple programming languages (Python, JavaScript, Java, Go, Rust) and popular testing frameworks (pytest, Jest, JUnit). Use it to improve code coverage, test boundary conditions, and validate error handling efficiently, saving manual testing time.

This skill generates robust JSON-LD structured data markup for various web components, including blogs, FAQs, tools, and SaaS pages. By implementing standard Schema.org types (WebSite, Article, FAQPage, etc.), you can significantly improve your SEO, boost click-through rates (CTR), and provide clear context to both search engines and AI systems. Includes implementation guidance for modern frameworks like Next.js.

This skill automates the migration of existing frontend code (such as those built with React, Vite, or other frameworks) into the proprietary Stitch Design format. It performs a multi-step workflow: first, extracting a self-contained static HTML file; second, analyzing source components and stylesheets to generate a comprehensive design system documentation (DESIGN.md); and finally, uploading both artifacts to the specified Stitch project for continuous iteration and improvement.