Skill UI

Guides bug bounty hunters through REST, SOAP, and GraphQL API fuzzing to uncover authentication weaknesses, IDOR, injections, and endpoint bypasses while outlining practical reconnaissance and exploitation workflows.

Guides analysts through assessing web authentication, credential stuffing, password policies, session tokens, and fixation flows to uncover broken authentication risks before attackers do.

This skill provides complete, programmatic integration with the protocols.io API v3, enabling advanced management of scientific protocols. Use it for the entire protocol lifecycle, including discovery by DOI or keywords, creating new protocols, managing steps and materials, coordinating collaborative development, organizing workspaces, and tracking experiments. It covers authentication, file handling, and discussion management, making it ideal for automated lab workflows and scientific documentation systems.

Automatically scans modern API frameworks (Next.js, Express, FastAPI, Django) to generate comprehensive, ready-to-run test suites. It ensures complete coverage for critical areas including authentication, input validation (boundary/injection), error code matrices, pagination, file uploads, and rate limiting. Ideal for TDD, contract testing, and security audits.

Generates a production-ready SaaS boilerplate with authentication, database schema, billing integration, API routes, and a dashboard built with Next.js 14 App Router, TypeScript, Tailwind, shadcn/ui, Drizzle ORM, and Stripe—ideal for bootstrapping new subscription-based products.

This comprehensive guide facilitates the development of a production-ready Minimum Viable Product (MVP) for a SaaS business. It covers the entire lifecycle, including idea validation, modern tech stack selection (Next.js, Supabase, Stripe), architectural design for multi-tenancy, database schema planning, authentication setup, payment integration, and a detailed pre-launch checklist for technical and marketing readiness.

A comprehensive guide and skill for building robust, production-ready REST API endpoints. This skill covers full lifecycle development, including input validation, centralized error handling, authentication/authorization checks, CRUD operations, pagination, and generating proper API documentation. It ensures that back-end services are secure, scalable, and adhere to industry best practices.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

This skill fetches unread GitHub Pull Requests (PRs) that require review from a specified team or were opened by a team member. It is ideal for users who need to check their team's review queue, find PRs needing attention, or automate the process of reviewing open code submissions without manually browsing GitHub notifications. Requires GitHub CLI authentication.

A lightweight integration for automating Google Docs tasks. It allows users to programmatically create, read, search, edit, append, and replace content in Google Workspace documents. With standalone OAuth authentication, it is ideal for local scripts that require direct document content manipulation without relying on a centralized server.

A comprehensive skill guide for implementing all forms of data fetching and networking in React Native/Expo environments. Covers best practices for using the native fetch API, managing state with React Query (TanStack Query), implementing robust error handling with retry logic, handling offline scenarios, and securely managing authentication tokens. Essential for building reliable, scalable mobile applications that interact with external APIs.

This guide provides expert knowledge on interacting with Odoo's external JSON-RPC and XML-RPC APIs. Learn how to handle authentication, perform model calls, and execute CRUD operations (Create, Read, Update, Delete) using practical examples in Python, JavaScript, and cURL. Ideal for building middleware or robust data synchronization tools.