Skill UI

This skill provides structured guidance and patterns for performing comprehensive web fuzzing using the powerful command-line tool, ffuf. Web fuzzing is an essential security testing technique used by penetration testers to discover hidden directories, unlinked endpoints, or sensitive files on a web server by systematically brute-forcing potential paths and parameters. Use this skill when you need to audit the security posture of a web application or map out unknown parts of a website.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

This expert skill validates the deployment readiness of Vertex AI Agent Engines. It executes a weighted audit across five critical dimensions: security, monitoring, performance, compliance, and best practices. The output provides a comprehensive 0-100% composite score, a detailed pass/fail report for each check, and a prioritized, actionable remediation plan, ensuring high-quality, production-grade deployments.

Runs a Lighthouse-based audit that combines performance, accessibility, SEO, and best-practice checks, categorizes issues by severity, and recommends targeted fixes for requested site reviews.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

This skill provides a comprehensive guide to auditing and fixing common animation performance issues in web applications, including layout thrashing, jank, and inefficient scroll-linked motion. It outlines critical best practices across CSS and JavaScript, covering rendering steps (layout, paint, composite) and best practices for achieving smooth, high-performance user interfaces.

This skill provides a comprehensive guide to systematic dark web monitoring, involving scanning underground forums, paste sites, and marketplaces for organizational threats. It covers setting up Tor-based crawling, automating credential leak detection (e.g., HIBP integration), and analyzing threat intelligence (CTI) using Python. Essential for proactive incident response and security auditing.

This tool performs a comprehensive audit of website images to ensure optimal SEO and web performance. It checks for proper alt text descriptions, recommends modern formats (WebP, AVIF), validates file sizes, and verifies responsive image implementation using `srcset` and `sizes`. Furthermore, it guides best practices for lazy loading, prioritizing LCP images, and preventing Cumulative Layout Shift (CLS) by checking for dimensions.

Comprehensive audit covering all aspects of web technical SEO, including crawlability (robots.txt, sitemaps), indexability, security headers, and URL structure. It deeply analyzes Core Web Vitals (LCP, INP, CLS) and assesses complex rendering scenarios like JavaScript SEO and structured data implementation for optimal search engine visibility.

This guide provides comprehensive security best practices for developers building with Framer. It covers secure credential management (like API keys and Site IDs), implementing the principle of least privilege, and securing plugins and Server API connections. Use this when auditing your Framer setup or ensuring production-level security for sensitive data handling.

A senior-level tool for performing deep-dive technical SEO audits and site architecture mapping. It analyzes crawl health, indexing blocks, sitemap integrity, and structural issues (like canonicalization, link flow, and crawl budget waste). Use this to diagnose complex Google Search Console errors and propose a full, engineered roadmap for website stabilization and optimization.

A full-featured tool for comprehensive SEO site auditing. It supports full-site crawling, mapping site structure (URL discovery), and deep scraping of JavaScript-rendered content. Ideal for technical SEO audits, content inventory, and identifying link gaps.