Skill UI

Provides comprehensive migration patterns for converting existing v5 Webiny code to the v6 architecture. It details key architectural shifts, including replacing ContextPlugins with Dependency Injection (DI) Services, updating event subscriptions to specialized EventHandler Features, and adopting the feature-based container registration model. Essential for developers and AI agents performing major framework upgrades.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

This guide details how to configure SMTP email delivery settings within a Webiny project using the `<Api.Mailer.Smtp />` component. It specifies the required properties (host, port, user, etc.) and emphasizes best practices, such as passing sensitive passwords via environment variables rather than hard-coding them. Ideal for developers setting up external email services.

A comprehensive REST API for sending and receiving multi-channel messages, including iMessage (blue bubbles), SMS, and RCS. This skill allows developers to integrate messaging capabilities into server-side applications, supporting advanced features such as group messaging, reactions, typing indicators, and status callbacks. It also handles inbound messages via webhooks, making it ideal for building robust, real-time communication services that require programmatic control over messaging lifecycles.

This module provides a comprehensive catalog of abstractions and utilities for handling API webhooks within the Webiny framework. It covers essential components such as payload types (IWebhookPayload), domain models (Webhook), delivery mechanisms, and core services like WebhookDispatcher and WebhookFactory. It supports advanced features including event routing, data validation, and secure payload signing, making it ideal for backend integration development.

This skill generates a comprehensive, actionable performance budget document for any web service or application. It moves beyond wish lists by establishing measurable performance constraints, covering key user journeys, Core Web Vitals (LCP, CLS, INP), backend SLOs (P95, P99), and architectural limitations. It guides teams on setting targets, measurement tools, and incident response processes when budgets are breached.

This skill details the advanced red-teaming technique of exploiting Active Directory Certificate Services (AD CS) via the ESC8 path. By abusing the HTTP web-enrollment endpoint and relaying coerced NTLM credentials, an attacker can compel a domain controller to request a machine certificate. This certificate is then used to compromise the domain via PKINIT and DCSync.

This skill provides comprehensive guidance on designing complex system integrations, including event-driven architectures (EDA), webhook flows, API chaining, and robust ETL pipelines. It covers advanced patterns like Saga, Outbox, and resilience mechanisms (Idempotency, Circuit Breaker), making it ideal for connecting multiple microservices and managing asynchronous data flows.

The Application Insights JavaScript SDK is designed to instrument client-side web applications for Real User Monitoring (RUM). It automatically collects crucial telemetry, including page views, user clicks, AJAX dependencies, unhandled exceptions, and custom events. This SDK supports correlating browser-side activity with backend services and includes specialized support for GenAI agent traces following OpenTelemetry standards.

Performs comprehensive, multi-page Lighthouse audits across an entire website. This tool is a robust, quota-free alternative to services like PageSpeed Insights, making it ideal for large sites or CI/CD pipelines where API limits are a concern. It aggregates key metrics such as performance, accessibility, and SEO scores across all audited routes.

This skill generates comprehensive end-to-end (E2E) automation tests using WebdriverIO (WDIO) in JavaScript or TypeScript. It supports various frameworks (Mocha, Jasmine, Cucumber) and includes advanced patterns like the Page Object Model (POM) and robust selector strategies. Users can configure tests for local execution or integrate with cloud services like LambdaTest, making it ideal for simulating complex user interactions and ensuring application quality across multiple browsers and environments.