Skill UI

A specialist in building highly interactive, spatial, and weightless web interfaces using advanced techniques like GSAP, 3D CSS transforms, and React. This skill excels in implementing modern visual trends such as glassmorphism and isometric grids, providing a premium, immersive feel for sophisticated dashboards and landing pages.

A robust, production-grade REST API gateway designed to wrap ComfyUI servers. It provides comprehensive features including workflow templating, job queuing (with priorities), webhooks, result caching, authentication, and rate limiting. It transforms ComfyUI into a universal, scalable, and secure service for automated image generation pipelines.

Intelligent multi-strategy web scraper that selects between static WebFetch, browser automation, curl/bash, and WebSearch paths to extract structured tables, lists, pricing, and other data, with pagination handling, validation confidence, transforms, and CSV/JSON output for monitoring workflows.

Performs dark web monitoring by crawling Tor services, forums, and paste sites to detect leaked credentials, breaches, and threat discussions, enabling security teams to validate controls and respond to emerging attacks.

This tool performs deep security assessments on SOAP web services. It analyzes WSDL definitions and actively tests for critical vulnerabilities such as XML External Entity (XXE) injection, XPath injection, WS-Security misconfigurations, and SOAPAction spoofing. It is essential for securing complex, enterprise-level APIs and ensuring adherence to industry security standards.

Tests web application email flows to spot SMTP header injection vulnerabilities so attackers cannot inject headers, modify recipients, or turn contact forms into spam relays—use during penetration tests of contact, password reset, or API-triggered emails.

Performs targeted security assessments of JSON Web Token implementations, probing algorithm confusion, claim tampering, brute-force secrets, and misuse during penetration tests of APIs, SSO, and microservice authentication flows.

Performs structured security assessments of SCADA HMI deployments by validating authentication, web interfaces, and PLC communication protections against IEC 62443 and NIST SP 800-82 requirements to guide OT risk reduction.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.

Transforms you into a 10x web engineer, guiding work across HTML, CSS, JavaScript, web APIs, HTTP/HTTPS, security, performance, accessibility, and infrastructure so you can deliver standards-compliant, high-quality front- and back-end solutions.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.

This skill provides comprehensive instructions and code examples for deploying Figma-powered applications, such as webhook receivers and design token APIs, to various production platforms including Vercel, Google Cloud Run, and Fly.io. It covers best practices for secret management, setting up robust webhooks, and implementing health checks to ensure reliable operation in a production environment.