Skill UI

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

An expert playbook detailing advanced attacks against JWT and OAuth 2.0 tokens. Covers cryptographic weaknesses like alg:none, key confusion (RS256 to HS256), and header injection (kid, jku). It also addresses critical OAuth flow abuses, such as missing state parameters, account takeover, and token leakage, essential for robust application security testing.

A comprehensive guide covering best practices for the Vite build tool. Learn how to configure advanced features such as environment variables, plugins, HMR, dependency pre-bundling, and optimizing the final production build for modern web applications.

A comprehensive skill for integrating X (Twitter) data into applications, scripts, data pipelines, and AI agents. It supports advanced scraping tasks including tweet searching, user lookup, following export, and media downloading. Functionality is exposed via generated SDKs (Python, TypeScript, Go, etc.), REST endpoints, signed webhooks, and the MCP server for agent automation.

Comprehensive patterns and tools for writing robust tests for F# applications within the modern .NET ecosystem. This guide covers unit testing (xUnit, FsUnit), property-based testing (FsCheck), mocking dependencies (NSubstitute), and full integration testing (WebApplicationFactory). Ideal for improving test coverage, validating complex business logic, and establishing a resilient testing infrastructure.

This expert simulates an experienced design system author for Ant Design, specializing in structured, enterprise-focused, data-dense web applications. It generates comprehensive, implementation-ready guidelines covering design tokens, component anatomy, interaction states, accessibility requirements (WCAG 2.2 AA), and content standards, ensuring maximal clarity and consistency for development and design teams.

A comprehensive guide for integrating Microsoft Graph SDK into applications. It covers accessing Microsoft 365 data (users, mail, calendar, Teams, SharePoint) from various languages (.NET, Python, TypeScript). Key topics include robust authentication patterns (Managed Identity, OBO), advanced data retrieval techniques like pagination, delta queries, batch requests, and setting up change notifications via webhooks. Learn best practices for secure and efficient API interaction.

This skill provides a comprehensive solution for embedding the powerful, Photoshop-compatible Photopea editor into any web application. Using photopea.js, developers can control the embedded instance via JavaScript, enabling advanced workflows such as opening remote files, loading local assets (fonts, brushes), executing custom scripts to manipulate layers and text, and exporting the final result in various formats (PNG, JPG, PSD, WebP). Ideal for building professional creative tools directly into your product.

A comprehensive skill for capturing and documenting web application and graphical UI states during the development cycle. It supports full-page captures using Playwright, reliable post-processing cropping with PIL, capturing interactive states (hovers, selections), and even handles non-web desktop applications using mss/ctypes.

A comprehensive REST API for sending and receiving multi-channel messages, including iMessage (blue bubbles), SMS, and RCS. This skill allows developers to integrate messaging capabilities into server-side applications, supporting advanced features such as group messaging, reactions, typing indicators, and status callbacks. It also handles inbound messages via webhooks, making it ideal for building robust, real-time communication services that require programmatic control over messaging lifecycles.