Skill UI

A specialized tool for authorized penetration testing and security assessments. It exploits the vulnerability of JWT libraries that accept tokens with the "alg": "none" header, bypassing cryptographic signature verification. Users can craft tokens with arbitrary claims (e.g., elevated privileges, impersonation) to validate that a target server correctly rejects unsigned JSON Web Tokens.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

This guide addresses the critical difference between standard Node.js SHA3-256 and the Keccak-256 hash function required by Ethereum. Using the wrong hash function can silently corrupt calculated function selectors, event topics, storage slots, and derived addresses. It provides best practices and code examples for using dedicated libraries (like ethers, viem, web3.js) to ensure correct, Ethereum-compliant hashing in JavaScript and TypeScript environments.

A comprehensive guide detailing best practices for database interaction in Go. It covers secure query writing using parameterized placeholders, handling transactions, managing connection pooling, dealing with NULLable columns, and choosing between libraries like sqlx and pgx, while strongly advising against using ORMs.

Provides a comprehensive guide to implementing Dependency Injection (DI) in Golang. It covers the principles of loose coupling, testability, and separation of concerns, detailing methods from manual constructor injection to using popular libraries like google/wire and uber-go/dig. Essential for structuring scalable, maintainable, and robust Go services.

This comprehensive guide provides best practices for creating, reviewing, and auditing documentation for Go projects. It covers writing principles (e.g., Intent over paraphrase, Concision), structuring documentation (godoc comments, README, CHANGELOG), and workflow orchestration for both libraries and CLI applications. Ideal for technical writers and developers ensuring code is discoverable and maintainable.

This skill acts as an expert guide to the Go ecosystem, helping developers select production-ready libraries and frameworks. It emphasizes prioritizing the standard library, assessing library maturity, and ensuring the simplest, most performant choice for any given Go project.

A comprehensive guide for setting up robust and scalable Go projects. It covers best practices for directory structure (cmd, internal, pkg), module naming conventions, adopting 12-Factor App standards, and choosing appropriate architectural patterns (Clean, Hexagonal, DDD). Ideal for starting new services, libraries, or monorepos in Go.

A comprehensive guide to the Go programming language ecosystem. This resource curates official documentation, essential newsletters, key developer profiles, and community hubs. Use this guide when you need to stay current with Go language features, discover new libraries, or keep up with industry best practices and community discussions.

A comprehensive guide for migrating code from deprecated libraries like alchemy-web3 to the modern alchemy-sdk (v3). This resource details handling breaking changes, understanding new API namespaces (core, nft, ws), and updating web3 interactions to ensure seamless blockchain functionality.

This skill provides a comprehensive workflow to export images, icons, and assets directly from Figma files using the REST API. It enables users to render specific frames or components as high-quality PNG, SVG, JPG, or PDF files. Ideal for building automated asset pipelines, generating documentation previews, or batch exporting large icon libraries.

This utility provides robust methods to manage API rate limits when integrating with the Anima API. It implements throttling using the `Bottleneck` pattern for stable, high-volume operations, and includes a 429 retry handler with progressive backoff. This is essential for large-scale batch generation of design systems or complex component libraries.