Skill UI

This skill ensures code adheres to security best practices and identifies vulnerabilities. It is used for authentication, authorization, input validation, file uploads, and API development. It covers secrets management, SQL injection prevention, XSS protection, and secure session handling.

A skill for building UI with a core component library and design system patterns. Provides guidance on using design tokens for spacing, colors, and typography, and includes patterns for Box, HStack, VStack, Text, Button, Input, and Card components. Ideal for consistent, maintainable UI development.

This skill covers building user interfaces using a core component library and design system patterns. It emphasizes using design tokens for spacing, color, and typography instead of hard-coded values. Includes components like Box, Button, Input, and layout patterns for forms and lists. Ensures consistent styling and behavior across the application.

This skill guides the development of EarLLM One, a complex Android application. The app captures real-time audio from Bluetooth earbuds, transcribes the voice using STT, sends the text input to a Large Language Model (LLM) via a robust pipeline, and plays the response back using TTS. It requires deep knowledge of Kotlin, Android development, Bluetooth profiles (A2DP/HFP), and advanced audio routing.

This skill covers Formik form handling patterns for React applications. It includes setting up basic forms, implementing validation schemas using Yup, handling form field helpers, and managing form submission with GraphQL. Suitable for building login forms, edit forms, and complex input validation scenarios in TypeScript environments.

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns. Provides guidance on CSP configuration, safe DOM manipulation, input validation, clickjacking protection, and secure redirects.

Orchestrates game development projects by routing to specialized sub-skills based on platform, dimension, and engine fit. Covers core principles like game loop, pattern selection, input abstraction, performance budgets, AI, and collision strategies. Use when starting or structuring a game project, choosing frameworks, or picking among Phaser, PixiJS, Kaplay, Three.js, Godot, Unity, and more.

Technique for authorized bug-bounty and penetration-testing engagements that hunts mishandled exceptional conditions in web apps, inducing unhandled exceptions with wrong-type, malformed, or boundary inputs to detect verbose stack traces, ORM internals, server paths, and framework version leaks.

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.

This skill compares two code versions to verify semantic equivalence using semi-formal side-by-side tracing. It helps developers confirm behavior remains unchanged after refactoring, rewriting, or migration by identifying divergences in inputs, outputs, and side effects.

This skill produces a step-by-step execution trace for specific code inputs, resolving names and tracking type transitions. It clarifies code behavior when users are confused about outputs or logic, highlighting non-obvious behaviors like implicit coercions and side effects without evaluating code quality. It helps users understand exactly what the code does.