Skill UI

This technique audits user interaction flows (like button clicks) to detect subtle bugs that static analysis often misses. It specifically tracks the full sequence of state changes, identifying instances where later actions unintentionally cancel, contradict, or leave the UI in an inconsistent state due to state store side effects or race conditions. Ideal for debugging complex state management architectures (Redux, Zustand).

A comprehensive pipeline designed for Laravel projects to ensure code quality and stability before deployment. It systematically executes environment checks, linting, static analysis, full testing with coverage, security audits, migration validation, and cache preparation. Essential for robust CI/CD pipelines and pre-Pull Request validation.

This comprehensive guide outlines a multi-stage verification pipeline for Quarkus applications. It covers build artifacts, static analysis (Checkstyle, SonarQube, PMD), comprehensive testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native compilation, and performance testing (K6). Use this before PRs or deployments to ensure code quality and stability.

A comprehensive CI/CD quality gate checklist for Spring Boot projects. It guides developers through mandatory steps including building, static analysis (SpotBugs, PMD), running unit/integration tests, measuring code coverage, performing security scans (OWASP), and reviewing diffs before merging or deploying.

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.

This skill specializes in analyzing built frontend artifacts, going beyond static source code. It reconstructs the dynamic JavaScript structure, tracks chunk loading paths, and interprets source maps and build manifests to recover hidden routes, APIs, and runtime behaviors. Essential for deep security analysis and understanding execution flow from deployed bundles.

This comprehensive guide details the methodology for reverse engineering macOS and Mach-O binaries. It covers analyzing application bundles, deciphering Objective-C/Swift symbols, examining code signing and hardened runtime features, and performing both static (using tools like Ghidra, IDA) and dynamic analysis (using lldb, Frida) to aid in malware analysis and platform security research.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

A comprehensive, structured guide for reverse engineering and analyzing managed .NET/C# binaries. This skill covers the full workflow, including initial identification (CLR check), deobfuscation (using tools like de4dot), static analysis via IL view (dnSpyEx), and dynamic debugging. It is essential for analyzing malware, red team tools, and patching compiled C# applications.