Skill UI

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

Generates a highly polished, self-contained single-page HTML landing page optimized for maximum conversion. It incorporates advanced features like 3D CSS animations, GSAP scroll effects, and mouse parallax depth. To ensure accuracy, the skill uses a structured intake process (product pitch, target audience, brand colors, and tone) to build a conversion-ready page that reflects the actual product, not generic boilerplate. Outputs a single, deployable HTML file.

A comprehensive tool for the full lifecycle management of applications within the Lark ecosystem (Feishu/Miaoda). It supports three development paths: local full-stack development, HTML static hosting, and cloud-based AI session generation. Use this when creating, updating, deploying, or publishing any complex system, tool, or platform application.

This orchestrator converts complex Markdown content—such as long-form specs, code reviews, or slide decks—into a single-file, lightly-interactive HTML document. It deterministically classifies the input type (Document, Review, or Slides) and routes the content to the appropriate specialized converter sub-skill, ensuring the output retains density and structure far beyond what raw markdown can achieve.

This tool converts markdown PR writeups containing unified diff blocks and severity-tagged callouts into a single, structured, 2-column HTML review document. It generates a jump-navigation, displays the diff on the left and detailed annotations on the right, and enforces a mandatory named reviewer footer, ensuring WCAG compliance.

This skill uses WeasyPrint to reliably convert rich HTML content, complete with CSS styling, into professional PDF documents. It is ideal for generating static, styled exports such as reports, invoices, labels, and any HTML/Jinja-rendered page where the source content is already structured in HTML format. It supports advanced CSS Paged Media features like page sizes, margins, headers, and footers.

jscpd is a comprehensive code quality tool designed to detect copy-pasted or duplicated segments across programming source code. Supporting over 150 languages, it identifies redundant code blocks and calculates the overall duplication percentage. It offers multiple reporters (AI, HTML, JSON) and integrates with refactoring workflows to help developers maintain high code integrity.

This skill automates the migration of existing frontend code (including React, Vue, Angular, and Next.js components) into a structured Stitch Design. It orchestrates the extraction of a self-contained HTML file, analyzes the source code to build a comprehensive design system document, and finally uploads both assets into your Stitch project for iteration and improvement.

This skill captures a fully self-contained static HTML snapshot from any running web application (e.g., React, Vue, Next.js). Using Puppeteer, it renders the live DOM, automatically inlining all CSS styles and converting images, assets, and backgrounds to base64 data URIs. This ensures the generated HTML file is completely self-sufficient and requires no external network connection, making it perfect for sharing UI states, creating documentation, or preparing assets for offline viewing.

This skill acts as a mobile engineering bridge, converting web designs provided by Stitch into high-quality, production-ready React Native components. It handles complex tasks including translating HTML/CSS layouts into React Native primitives, extracting design tokens (colors, spacing) into a central theme file, and ensuring adherence to native component architectural rules. Ideal for developers integrating web-based prototypes into mobile applications.

This skill enables the upload of various local assets, including images (PNG, JPG, WEBP), extracted HTML, and design markdown files, directly to a designated Stitch project. Crucially, it bypasses the token limits associated with standard MCP tool calls by using a dedicated HTTP upload script. Use this when visual assets or large design documentation need to be integrated into your Stitch design system.