Skill UI

Provides an OWASP 2025-aligned vulnerability scanning mindset, supply chain defenses, attack surface mapping, and risk prioritization guidance with runtime scripts for automated validation of modern application security.

This skill enables AI-assisted debugging and comprehensive error analysis within the development environment. It utilizes Cascade to analyze complex error messages, stack traces, and surrounding code context to identify root causes. Use it when troubleshooting code or encountering runtime errors to receive detailed fix recommendations and prevention strategies.

Detects missing zeroization of secrets and flags compiler-optimized removals with mandatory assembly/IR evidence, helping auditors verify C/C++/Rust cryptographic code through dataflow, CFG, and runtime validation.

This skill provides best practices for structuring complex, production-ready applications built with Makepad. It details robust asynchronous communication patterns, showing how to integrate the Tokio runtime, manage state synchronization, and handle data flow between the main UI thread and background worker tasks using MPSC channels and SignalToUI. Essential for developing advanced chat clients or data streaming services.

This skill provides best practices for integrating Matrix SDK functionality into Makepad applications. It details the architecture and implementation patterns for building robust, real-time chat clients. Topics include using native Sliding Sync for efficient room updates, managing asynchronous requests (e.g., sending messages, fetching timelines), and handling complex Matrix operations within a Tokio runtime environment.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

A comprehensive master guide for developers looking to embed interactive 3D scenes created in Spline.design into modern web projects. It provides specific integration methods for various frameworks, including React, Next.js, Vue, and vanilla JavaScript, ensuring optimal performance and runtime control for stunning UI/UX experiences.

This skill manages complex coding tasks from initial implementation through testing, review incorporation, deployment, and final runtime verification. It ensures the task meets explicit Definition of Done (DoD) criteria iteratively, minimizing the need for manual prompting across multiple development stages.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

Bun is a high-performance, all-in-one JavaScript runtime and toolchain. It functions as a runtime, package manager, bundler, and test runner, offering significant speed improvements over traditional Node.js setups. It is ideal for modern, fast-paced development, new projects, and deployment environments like Vercel.

A comprehensive guide for conducting penetration testing on iOS and Android mobile applications, adhering to the OWASP MASTG. This skill covers the full mobile attack surface, including static analysis of binaries, dynamic runtime testing, and deep API security assessment. Techniques taught include bypassing certificate pinning, analyzing local data storage (Keychain, SQLite), and identifying vulnerabilities in authentication and network communication.

Guide for performing Android and iOS mobile application penetration testing with OWASP MASTG/MASVS, covering static/dynamic analysis, data storage checks, API abuse, and runtime manipulation using Frida, Objection, and MobSF.