Skill UI

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

Systematic code maturity assessment using Trail of Bits' 9-category framework, analyzing arithmetic safety, access controls, documentation, MEV risks, testing, and more to deliver evidence-backed scorecards and actionable recommendations.

This expert skill analyzes codebases to identify, quantify, and prioritize all forms of technical debt—including code complexity, architectural flaws, outdated dependencies, and testing gaps. It calculates the measurable impact of this debt on development velocity, bug rates, and overall business risk. The output provides a comprehensive, actionable, and ROI-driven roadmap for systematic remediation.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

This expert guide provides a systematic, structured methodology for debugging complex software issues. It teaches users how to analyze stack traces, correlate logs, establish consistent reproduction steps, and apply hypothesis-driven testing to isolate and resolve bugs, crashes, or unexpected behavior in any codebase. Essential for professional troubleshooting and quality assurance.

This skill provides structured guidance and patterns for performing comprehensive web fuzzing using the powerful command-line tool, ffuf. Web fuzzing is an essential security testing technique used by penetration testers to discover hidden directories, unlinked endpoints, or sensitive files on a web server by systematically brute-forcing potential paths and parameters. Use this skill when you need to audit the security posture of a web application or map out unknown parts of a website.

This structured workflow guides the systematic, low-risk modernization of legacy systems using the Strangler Fig pattern. It provides a phased approach, starting with comprehensive assessment (risk, dependency mapping), establishing robust test coverage (contract testing, data management), and implementing incremental migration infrastructure (API gateways, feature flags) to ensure continuous business operation during the transition.

A comprehensive toolkit designed to systematically diagnose and troubleshoot integration issues with the Gamma API. It includes scripts for connectivity testing, authentication validation, latency measurement, and checking various API endpoints (themes, folders, generations) across both Bash and TypeScript environments. Essential for developers ensuring reliable API connections.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

This skill guides developers through advanced, safe, and systematic code refactoring using Test-Driven Development (TDD) principles. It provides a comprehensive workflow encompassing pre-assessment, detecting code smells, applying major design patterns (SOLID, Factory, Strategy), optimizing performance, and ensuring safety through rigorous, incremental testing. Use this when improving code structure, restructuring large components, or updating legacy systems while guaranteeing functional integrity and maintainability.

An expert specialist for rigorous visual validation, focusing on UI testing, design system compliance, and WCAG accessibility verification. This skill systematically analyzes visual evidence for cross-platform consistency, pixel-perfect accuracy, and adherence to modern design standards, utilizing principles from visual regression testing and comprehensive QA methodologies.