Skill UI

Conduct authorized security assessments for REST, GraphQL, and WebSocket APIs. Covers discovery, authentication flaws (JWT/OAuth), authorization bypasses (BOLA/IDOR), rate limiting, and a structured 10-phase testing workflow using specialized tools.

Workflow for assessing REST and GraphQL API security, covering discovery, authentication, authorization, input validation, rate limiting, GraphQL testing, error handling, and reporting.

Master secure authentication and authorization implementation using industry-standard patterns. Covers user login systems, REST/GraphQL API security, OAuth2, SSO, session management, and RBAC design. Includes guidance on token lifecycle, secrets storage, and threat modeling to protect resource access boundaries effectively.

GraphQL enables clients to request precise data structures through a single endpoint with a typed schema. This skill covers schema design, resolvers, DataLoader optimization, federation for microservices, and client integration tools like Apollo. It emphasizes treating the schema as a contract and understanding when to use GraphQL versus REST for complex data relationships.

Hunting skill for GraphQL vulnerabilities. Provides methodology to discover endpoints, test introspection, map schemas, and exploit authorization flaws across GraphQL and REST APIs.

Full Instagram Graph API integration for Business/Creator accounts, handling publishing, analytics, comments, DMs, hashtags, scheduling, templates, dashboards, and governance; suited for automating multi-format campaigns via scripts and APIs.

Automates Linear issues, projects, cycles, labels, comments, and GraphQL workflows through Rube MCP’s Composio toolkit so teams can manage states, tasks, and custom queries without juggling direct APIs.

Provides expert guidance on Makepad cross-platform development, covering supported platforms, graphics backends, runtime platform detection, conditional compilation, and platform-specific APIs for desktop, mobile, web, and more.

This skill provides comprehensive guidance for building scalable, maintainable, and production-ready backend applications using Node.js. It covers modern architectural patterns, best practices, and implementation details for REST APIs, GraphQL servers, microservices, authentication, real-time WebSockets, and complex database integrations (SQL/NoSQL).

This skill identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. It evaluates whether interfaces are resistant to developer misuse, focusing on algorithm selection, default values, primitive types, and configuration cliffs. Use when reviewing API designs, cryptographic library ergonomics, or assessing authentication interfaces to ensure secure-by-default principles are followed.

Expert patterns for building Shopify applications using Remix, React Router, and App Bridge. Covers webhook handling, GraphQL Admin API, Polaris UI components, billing integration, and app extensions. Ideal for developers creating custom Shopify solutions.

Build Shopify apps, extensions, and themes using GraphQL Admin API, Shopify CLI, Polaris UI, and Liquid templating. Customize checkout, admin UI, and POS actions. Integrate with Shopify APIs, implement webhooks, and manage metafields for e-commerce solutions.