Skill UI

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

Master Stripe payment processing integration for robust, PCI-compliant payment flows. This skill covers all aspects of modern billing, including one-time charges, recurring subscriptions, handling webhooks, and processing refunds. Ideal for building secure, scalable e-commerce and SaaS billing systems in web or mobile applications.

This module provides the essential three pillars for building robust full-stack applications on Supabase. It implements comprehensive user authentication (including OAuth, email/password, and session management), secure file storage (uploading, downloading, and managing signed URLs), and real-time data subscriptions (listening to Postgres changes, presence, and broadcasts). It is crucial for developing modern, live-updating, and highly secure web services.

A comprehensive guide to building event-driven architectures using Supabase. It covers four core event mechanisms: Database Webhooks (pg_net), Postgres LISTEN/NOTIFY, Edge Function HTTP calls, and Realtime subscriptions. Includes production-ready SQL triggers, signature verification logic, and best practices for handling data changes (INSERT, UPDATE, DELETE) as external HTTP events.

A comprehensive guide to building functional and scalable Telegram bots. Covers bot architecture design, mastering the Telegram Bot API, optimizing user experience (UX), implementing monetization strategies (Freemium, Subscriptions), and deploying production-ready bots using webhooks. Learn to transform complex ideas into engaging, real-world automated assistants.

Guides building Telegram Mini Apps (TWA) with web technologies, TON blockchain, Telegram Web App API, crypto payments, TonConnect, user auth, and viral UX patterns so teams can launch games, DeFi, or monetized utilities inside Telegram.

This skill provides a comprehensive collection of quick-start templates for developing applications across diverse tech stacks. Users can quickly scaffold full-stack web apps (Next.js), SaaS products, REST APIs (Express, FastAPI), mobile apps (Flutter, React Native), and specialized tools like CLI utilities. It ensures the initial project setup adheres to modern best practices, saving significant time during the initial development phase.

This skill provides expertise in building robust, scalable, and intelligent test automation ecosystems. It covers AI-powered test generation, self-healing tests, Test-Driven Development (TDD), cross-platform automation (Web/Mobile/API), advanced CI/CD integration, and comprehensive quality engineering practices, ensuring high quality across the entire software development lifecycle.

This skill validates web applications across diverse browsers (Chromium, Gecko, WebKit) and real mobile devices. It supports both local testing using Playwright and scalable cloud testing via major platforms like BrowserStack, Sauce Labs, and Kobiton. Use it when ensuring consistent UI/UX, correct CSS rendering, and functional JavaScript behavior regardless of the target environment or device type.

This skill generates code to create complex, interactive 3D scenes and visualizations on the web using the Three.js library and WebGL. It covers the entire development lifecycle, including setting up the core components (Scene, Camera, Renderer), defining geometry, applying materials, adding lighting, and implementing animation loops. Ideal for web developers needing to display product mockups, scientific data visualizations, or immersive user experiences.

Provides a structured reference covering the 100 most critical web vulnerabilities, including definitions, root causes, impacts, and mitigation guidance aligned with OWASP categories to support assessments and remediation planning.

Provides a structured reference of the 100 most critical web application vulnerabilities organized by category, helping security teams identify attack vectors, assess impacts, and follow remediation guidance during audits or penetration tests.