Skill UI

A comprehensive guide to securely implementing Supabase across diverse modern application stacks. This skill covers critical patterns for Next.js Server Components (SSR), Single Page Applications (SPA), React Native mobile apps, Edge Functions (Serverless), and complex multi-tenant deployments using RLS or schema isolation. It guides developers on correctly managing client types (anon vs. service_role) and handling authentication flows in various environments.

This skill provides a comprehensive collection of quick-start templates for developing applications across diverse tech stacks. Users can quickly scaffold full-stack web apps (Next.js), SaaS products, REST APIs (Express, FastAPI), mobile apps (Flutter, React Native), and specialized tools like CLI utilities. It ensures the initial project setup adheres to modern best practices, saving significant time during the initial development phase.

This skill validates web applications across diverse browsers (Chromium, Gecko, WebKit) and real mobile devices. It supports both local testing using Playwright and scalable cloud testing via major platforms like BrowserStack, Sauce Labs, and Kobiton. Use it when ensuring consistent UI/UX, correct CSS rendering, and functional JavaScript behavior regardless of the target environment or device type.

Execute end-to-end automated testing for mobile applications across both iOS and Android platforms. This skill simulates real user interactions, covering UI flows, gestures (swipe, pinch), form validation, and platform-specific behaviors (e.g., Safe Area handling, Android back button logic). It supports industry-standard frameworks like Appium, Detox, and Maestro, making it essential for ensuring cross-platform quality assurance and robust CI/CD pipelines.

A comprehensive skill set for building modern, scalable Vue 3 applications. Expertise covers implementing features using the Composition API, managing global state with Pinia, configuring Nuxt 3 for SSR/SSG, and developing hybrid mobile apps with Quasar/Capacitor. Includes optimization for Vite builds, PWA implementation, and strict TypeScript enforcement.

A comprehensive guide detailing how to use API routes in Expo Router with EAS Hosting. Learn best practices for handling server-side secrets, proxying third-party APIs (e.g., OpenAI, Stripe), performing database operations, and implementing robust backend logic using standard HTTP methods (GET, POST, etc.). Ideal for building secure, scalable mobile application backends.

This skill guides the comprehensive packaging and deployment of applications built with Makepad. It covers building for multiple target platforms, including desktop (Windows, macOS, Linux), mobile (Android, iOS), and WebAssembly. Use this guide when setting up CI/CD pipelines, generating distributable installers (.deb, .dmg, .apk, .ipa), or automating release artifacts using tools like cargo-packager and cargo-makepad.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

A comprehensive guide for conducting penetration testing on iOS and Android mobile applications, adhering to the OWASP MASTG. This skill covers the full mobile attack surface, including static analysis of binaries, dynamic runtime testing, and deep API security assessment. Techniques taught include bypassing certificate pinning, analyzing local data storage (Keychain, SQLite), and identifying vulnerabilities in authentication and network communication.

Guide for performing Android and iOS mobile application penetration testing with OWASP MASTG/MASVS, covering static/dynamic analysis, data storage checks, API abuse, and runtime manipulation using Frida, Objection, and MobSF.

A comprehensive skill designed for advanced security analysis, detecting malicious behaviors across mobile applications (Android/iOS). It performs multi-layered analysis, including static indicator checks (permissions, manifest), dynamic instrumentation via Frida, network traffic monitoring (C2 communication, exfiltration), and automated scanning (MobSF). Use this when investigating suspicious apps, detecting trojans, or performing malware triage.

A comprehensive skill for assessing mobile applications (Android and iOS) for vulnerabilities related to deep links, custom URI schemes, and intent handling. This skill identifies risks such as unauthorized access, data injection, intent hijacking, and improper validation of App Links or Universal Links, crucial for robust mobile security testing.