Skill UI

A comprehensive guide to securely implementing Supabase across diverse modern application stacks. This skill covers critical patterns for Next.js Server Components (SSR), Single Page Applications (SPA), React Native mobile apps, Edge Functions (Serverless), and complex multi-tenant deployments using RLS or schema isolation. It guides developers on correctly managing client types (anon vs. service_role) and handling authentication flows in various environments.

This skill provides a comprehensive collection of quick-start templates for developing applications across diverse tech stacks. Users can quickly scaffold full-stack web apps (Next.js), SaaS products, REST APIs (Express, FastAPI), mobile apps (Flutter, React Native), and specialized tools like CLI utilities. It ensures the initial project setup adheres to modern best practices, saving significant time during the initial development phase.

This skill validates web applications across diverse browsers (Chromium, Gecko, WebKit) and real mobile devices. It supports both local testing using Playwright and scalable cloud testing via major platforms like BrowserStack, Sauce Labs, and Kobiton. Use it when ensuring consistent UI/UX, correct CSS rendering, and functional JavaScript behavior regardless of the target environment or device type.

Execute end-to-end automated testing for mobile applications across both iOS and Android platforms. This skill simulates real user interactions, covering UI flows, gestures (swipe, pinch), form validation, and platform-specific behaviors (e.g., Safe Area handling, Android back button logic). It supports industry-standard frameworks like Appium, Detox, and Maestro, making it essential for ensuring cross-platform quality assurance and robust CI/CD pipelines.

A comprehensive skill set for building modern, scalable Vue 3 applications. Expertise covers implementing features using the Composition API, managing global state with Pinia, configuring Nuxt 3 for SSR/SSG, and developing hybrid mobile apps with Quasar/Capacitor. Includes optimization for Vite builds, PWA implementation, and strict TypeScript enforcement.

A comprehensive guide detailing how to use API routes in Expo Router with EAS Hosting. Learn best practices for handling server-side secrets, proxying third-party APIs (e.g., OpenAI, Stripe), performing database operations, and implementing robust backend logic using standard HTTP methods (GET, POST, etc.). Ideal for building secure, scalable mobile application backends.

This skill guides the comprehensive packaging and deployment of applications built with Makepad. It covers building for multiple target platforms, including desktop (Windows, macOS, Linux), mobile (Android, iOS), and WebAssembly. Use this guide when setting up CI/CD pipelines, generating distributable installers (.deb, .dmg, .apk, .ipa), or automating release artifacts using tools like cargo-packager and cargo-makepad.

Performs OWASP MASTG-aligned penetration testing on iOS and Android apps, combining binary static analysis, dynamic interception with Burp/Frida, and API/data storage reviews to uncover insecure storage, communication, or authentication flaws before release.

Guide for performing Android and iOS mobile application penetration testing with OWASP MASTG/MASVS, covering static/dynamic analysis, data storage checks, API abuse, and runtime manipulation using Frida, Objection, and MobSF.

Detects and analyzes malicious behavior in Android and iOS apps through static, MobSF, Frida, and network monitoring workflows, helping analysts triage suspicious builds, hunt indicators, and validate exfiltration or C2 signals during incident response.

Guides security testers through discovering and abusing Android and iOS deep link handling flaws—custom URI schemes, App/Universal Links, intent hijacking, and WebView payloads—to evaluate unauthorized access and injection risks in mobile apps.

Identifies and exploits insecure local data storage in Android and iOS apps, covering SharedPreferences, SQLite, backups, and keychain misuse to support OWASP M9 and MASVS storage assessments during mobile penetration tests.