Skill UI

Scans Algorand TEAL/PyTeal smart contracts for 11 platform-specific vulnerabilities such as rekeying, unchecked fees, group manipulation, and missing access controls, then reports findings with severity, suggested fixes, and optional Tealer automation.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

Map web inputs for reflected or stored HTML injection, send crafted tags via URLs, POST bodies, or visible fields, and document appearance/phishing manipulations for authorized security assessments.

This skill outlines step-by-step methods for discovering, confirming, and exploiting Insecure Direct Object Reference flaws via parameter manipulation, HTTP method switching, enumeration, and Burp Suite workflows, enabling authorized testers to document findings and suggest fixes.

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

Master the art of building complex, production-grade user interfaces for Obsidian plugins. This guide covers implementing custom sidebar views (ItemView), interactive modal dialogs (for forms and confirmations), context menus, status bar widgets, and advanced editor commands. Learn how to interact with the Obsidian Vault API for file manipulation, significantly enhancing your plugin's functionality and user experience.

A comprehensive guide for developers implementing robust data persistence and file handling within Obsidian plugins. It covers best practices for saving plugin configurations, reliable vault file I/O (read, write, append), safe manipulation of YAML frontmatter via metadata cache, and registering event listeners for file renames and deletions. Essential for building stable, data-intensive plugins.

This guide provides a comprehensive overview of PDF manipulation techniques using both Python libraries (like pypdf, pdfplumber, reportlab) and command-line tools (like pdftotext, qpdf). It covers core functionalities such as merging, splitting, rotating, extracting text and structured tables, creating new PDFs, and performing OCR on scanned documents, making it essential for automation workflows.

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

Biopython provides Python APIs for sequence manipulation, database access, BLAST automation, structural bioinformatics, and phylogenetics, making it ideal for scripting custom pipelines and batch processing in computational molecular biology workflows.

This guide provides a quick reference for 'pipe' and 'flow' utilities in fp-ts. The `pipe` function is used to chain multiple operations to transform a specific value, while `flow` allows you to create reusable, composed functions (pipelines). It is essential for implementing clean, declarative data manipulation and functional composition in TypeScript.