Skill UI

This skill rigorously audits UI code against established design system conventions, focusing on adherence to design tokens, component ergonomics, accessibility standards, and mobile UX best practices. It ensures that the implementation is consistent with the defined style guide, providing a structured verdict and concrete, actionable fixes.

A comprehensive index of 46 production-grade test automation skills, covering E2E, unit, mobile, BDD, and cloud testing across 15+ languages. This skill equips AI coding assistants to act as senior QA architects, generating structured, real-world test code for major frameworks like Playwright, Selenium, Cypress, and Jest. It supports project setup, CI/CD integration, and cross-platform debugging.

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

XcodeBuildMCP is a unified skill set designed to streamline the entire mobile and desktop development lifecycle. It replaces raw command-line tools like xcodebuild, xcrun, and simctl, providing structured workflows for iOS, macOS, watchOS, tvOS, and visionOS. Capabilities include project discovery, managing simulator and physical device workflows, advanced UI automation (gestures, view inspection), robust logging, and deep debugging using LLDB. It simplifies complex build, test, and run operations across multiple platforms.

Generate a high-fidelity, multi-screen mobile prototype simulating a gamified experience, perfect for habit trackers, life management apps, or RPG concepts. The output features three distinct phone frames: cover/value proposition, daily quests dashboard, and detailed quest view, all presented on a single dark showcase stage. Ideal for visualizing user journeys and engagement mechanics.

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.