Skill UI

This module provides the essential three pillars for building robust full-stack applications on Supabase. It implements comprehensive user authentication (including OAuth, email/password, and session management), secure file storage (uploading, downloading, and managing signed URLs), and real-time data subscriptions (listening to Postgres changes, presence, and broadcasts). It is crucial for developing modern, live-updating, and highly secure web services.

This skill provides a comprehensive collection of quick-start templates for developing applications across diverse tech stacks. Users can quickly scaffold full-stack web apps (Next.js), SaaS products, REST APIs (Express, FastAPI), mobile apps (Flutter, React Native), and specialized tools like CLI utilities. It ensures the initial project setup adheres to modern best practices, saving significant time during the initial development phase.

This skill validates web applications across diverse browsers (Chromium, Gecko, WebKit) and real mobile devices. It supports both local testing using Playwright and scalable cloud testing via major platforms like BrowserStack, Sauce Labs, and Kobiton. Use it when ensuring consistent UI/UX, correct CSS rendering, and functional JavaScript behavior regardless of the target environment or device type.

Provides a structured reference of the 100 most critical web application vulnerabilities organized by category, helping security teams identify attack vectors, assess impacts, and follow remediation guidance during audits or penetration tests.

This skill scans web application endpoints and cookies to spot missing CSRF safeguards—tokens, double-submit cookies, SameSite attributes, and origin checks—then documents vulnerable paths and mitigation steps for security reviews.

A comprehensive guide to building and deploying Vercel Edge Functions. These functions run on Vercel's global Edge Network (V8 isolates), providing ultra-low latency and zero cold starts. Learn how to use Web Standard APIs for critical tasks such as authentication, geolocation routing, A/B testing, and high-performance API middleware, drastically improving application speed and user experience.

Automates Web Application Firewall rule creation by guiding advanced security teams through best practices, code generation, and validation for compliant penetration-testing workflows.

A comprehensive guide for developers to measure, analyze, and optimize website and web application performance. Covers critical areas including Core Web Vitals (LCP, FID, CLS), reducing JavaScript bundle size, implementing effective caching, and optimizing rendering paths to boost user experience and SEO rankings.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

Master advanced testing strategies for smart contracts using industry-leading frameworks like Hardhat and Foundry. This skill covers unit testing, integration testing, gas optimization analysis, fuzzing for edge cases, and simulating real-world mainnet interactions via forking. Ideal for ensuring the security and reliability of decentralized applications (DApps).

A comprehensive toolkit for automating and testing local web applications using Python and Playwright. It supports complex dynamic interactions, managing server lifecycles, identifying stable selectors, capturing visual evidence (screenshots), and debugging UI behavior. The guides follow a robust 'Reconnaissance-Then-Action' pattern for reliable end-to-end testing.

Specialist workflow for building resilient WebSocket and Socket.IO systems, covering authentication, rooms, Redis pub/sub scaling, sticky sessions, and monitoring for chat and presence applications.