Skill UI

This skill provides a comprehensive guide to systematic dark web monitoring, involving scanning underground forums, paste sites, and marketplaces for organizational threats. It covers setting up Tor-based crawling, automating credential leak detection (e.g., HIBP integration), and analyzing threat intelligence (CTI) using Python. Essential for proactive incident response and security auditing.

A detailed methodology for identifying Cross-Site Scripting (XSS) vulnerabilities across web applications. It guides systematic testing for Reflected, Stored, and DOM-based XSS, covering payload bypass, output encoding evaluation, and assessing Content Security Policy (CSP) protection. Essential for OWASP WSTG testing and client-side security audits.

Automates comprehensive end-to-end Quality Assurance (QA) for deployed web applications. This skill performs multi-stage testing, including smoke tests, complex user interactions (forms, authentication), visual regression checks across breakpoints, performance monitoring (Core Web Vitals), and WCAG accessibility audits.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

Leverage AI-powered exploratory testing to thoroughly audit web applications and verify functionality. This skill simulates user interaction, detecting complex bugs, validating critical flows (like checkout or login), and checking accessibility compliance. Use it proactively after development to ensure quality before deployment.

This tool performs a comprehensive audit of website images to ensure optimal SEO and web performance. It checks for proper alt text descriptions, recommends modern formats (WebP, AVIF), validates file sizes, and verifies responsive image implementation using `srcset` and `sizes`. Furthermore, it guides best practices for lazy loading, prioritizing LCP images, and preventing Cumulative Layout Shift (CLS) by checking for dimensions.

Comprehensive audit covering all aspects of web technical SEO, including crawlability (robots.txt, sitemaps), indexability, security headers, and URL structure. It deeply analyzes Core Web Vitals (LCP, INP, CLS) and assesses complex rendering scenarios like JavaScript SEO and structured data implementation for optimal search engine visibility.

This tool reviews user interface (UI) code files to ensure compliance with established Web Interface Guidelines and best practices. Use it when auditing design, checking accessibility, or performing general code reviews to meet industry standards and improve overall product quality. It fetches the latest rules and outputs detailed findings.

This guide provides comprehensive strategies for optimizing API usage and managing costs associated with the Attio platform. Learn how to audit current usage patterns, implement smart caching tiers (schema, records, queries), and replace inefficient polling mechanisms with webhooks to significantly reduce request volume and stay within budget limits.

A comprehensive resource detailing common anti-patterns and critical mistakes when integrating with the Canva Connect API. This guide covers essential best practices, including robust token management, handling rate limits, implementing asynchronous workflows, and securing webhooks. Ideal for developers conducting code reviews, onboarding new team members, or auditing existing Canva-related integrations.

This comprehensive guide details the ten most common mistakes and anti-patterns encountered when integrating with the Figma REST and Plugin APIs. It covers critical topics such as preventing oversized data fetches, managing rate limits, securing tokens, handling color format conversions, and optimizing data sync using webhooks instead of polling. Essential for code reviews and onboarding. Use when reviewing Figma code, onboarding new developers, or auditing an existing Figma integration.