Skill UI

This skill provides a structured, git-aware mechanism to revert changes associated with specific logical work units (tracks, phases, or tasks). It performs comprehensive pre-flight checks, identifies relevant commits through structured logging, displays a detailed execution plan, and executes the revert safely in reverse chronological order. Ideal for undoing complex, multi-step development changes while maintaining project integrity.

A comprehensive architectural guide for building production-grade flowcharts using ReactFlow. This pattern set covers key challenges including hierarchical tree navigation (expandable/collapsible nodes), performance optimization via incremental rendering and memoization, and advanced state management using Redux-like reducer patterns with history tracking (undo/redo).

A specialized reverse-engineering skill designed to extract comprehensive functional and non-functional specifications from existing, undocumented, or legacy codebases. It operates by analyzing code structure, tracing data flows, and identifying observable behaviors. The output is structured using EARS (Easy Approach to Requirements Syntax), providing clearer requirements documentation, architectural diagrams, and dependency maps for onboarding or system modernization.

Verifies that blockchain code precisely implements documented specifications by comparing logic, invariants, flows, and assumptions against whitepapers or design documents, flagging undocumented behavior, mismatches, and compliance gaps during audit engagements.

This tool rigorously validates API schemas against industry standards, including OpenAPI 3.0/3.1, JSON Schema, and GraphQL SDL. It performs structural analysis to detect incomplete schemas, inconsistent naming, undocumented endpoints, and critical breaking changes. Use it within your CI/CD pipeline to ensure API contracts are robust, compliant, and maintainable before release.

This tool systematically tests API endpoints for mass assignment (over-posting) vulnerabilities. It simulates an attacker injecting undocumented or privileged fields (such as 'role' or 'balance') into standard API requests. By analyzing the server's response, it determines if the API binds all client-supplied parameters to the data model without proper filtering, which could allow unauthorized privilege escalation or data modification. This is critical for achieving OWASP API Top 10 compliance.

This skill implements resilient API interaction patterns for external services. It uses adaptive rate-limiting techniques, including exponential backoff and jitter, to gracefully handle HTTP 429 errors, adapting to undocumented server limits. Furthermore, it provides a dedicated request queue mechanism to manage concurrency, ensuring reliable execution of large-scale, bulk data operations without triggering service throttling.

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.