Skill UI

This skill acts as a compatibility alias for pull request (PR) creation. It is designed to handle requests using the legacy name 'create-pr', redirecting the user to the canonical and updated workflow found in 'sentry-skills:pr-writer'. Use this when referencing the old skill name to ensure the latest PR writing standards are applied.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

Explains how to create route.ts endpoints in the Next.js App Router, covering HTTP methods, request/response handling, streaming, cookies, redirects, CORS, and caching so you can build REST APIs.

Guides building Next.js Server Actions for App Router forms, mutations, and optimistic updates, covering useFormState/useFormStatus hooks, revalidation helpers, and post-submission redirects.

This guide provides a comprehensive walkthrough for deploying and configuring a production-grade Command and Control (C2) infrastructure using the open-source Havoc framework. It covers setting up the Teamserver, configuring secure HTTPS listeners, implementing redirectors (e.g., Nginx), and deploying Demon agents for advanced post-exploitation red team operations. This skill is essential for authorized security assessments and building robust defensive countermeasures.

A comprehensive guide for penetration testers detailing methods to identify and exploit misconfigurations in OAuth 2.0 and OpenID Connect (OIDC) flows. Techniques cover redirect URI manipulation, authorization code theft, token leakage via headers, and scope escalation during security assessments.

This skill provides a comprehensive methodology for identifying and exploiting open redirect vulnerabilities in web applications. It covers advanced bypass techniques (e.g., URL encoding, protocol-relative URLs, path traversal) and demonstrates chaining with other flaws like OAuth redirection for advanced phishing simulations and token theft. Designed for authorized security professionals conducting penetration tests.

This comprehensive tool assesses critical security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. It systematically tests for common vulnerabilities like authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, and scope escalation. Ideal for penetration testers and security engineers evaluating the robustness of identity providers and client applications.

This workflow provides an end-to-end programmatic solution for managing the Canva design lifecycle. It allows users to create new designs via the API, redirect users to the editor for modifications, retrieve design metadata, and finally, export finished assets in various high-quality formats (PDF, PNG, JPG, etc.). Ideal for integrating design capabilities into external applications like CMS or marketing automation tools.

This comprehensive checklist guides users through identifying and exploiting open redirect vulnerabilities in web applications. It covers parameter identification, advanced bypass techniques (e.g., URL encoding, CRLF injection), and chaining the vulnerability with other flaws like OAuth or SSRF. Ideal for web application penetration testing and bug bounty hunting.

A comprehensive guide and workflow for deploying static websites (e.g., Vue, React, Angular, Hugo, Jekyll) from a local environment to a production server using VSCode SFTP. This skill covers setting up secure SFTP connections, generating production-ready Nginx configurations (including security headers, caching, and HTTPS redirects), and providing a complete deployment checklist for smooth CI/CD-like workflows.

This module provides essential, standardized abstractions and hooks for managing navigation within a web administration panel. It includes components like LinkComponent and RouteLinkComponent, along with hooks such as useRouter and useRoute, allowing developers to easily structure routes, handle redirection, and manage client-side navigation state efficiently.