Skill UI

This skill provides best practices for structuring complex, production-ready applications built with Makepad. It details robust asynchronous communication patterns, showing how to integrate the Tokio runtime, manage state synchronization, and handle data flow between the main UI thread and background worker tasks using MPSC channels and SignalToUI. Essential for developing advanced chat clients or data streaming services.

A comprehensive guide and best practices for managing event handling and defining custom action patterns within Makepad applications. It covers centralized action processing (using MatchEvent), widget-to-widget communication, and implementing complex state logic, making it ideal for building robust chat clients or complex UI systems.

This skill provides best practices for integrating Matrix SDK functionality into Makepad applications. It details the architecture and implementation patterns for building robust, real-time chat clients. Topics include using native Sliding Sync for efficient room updates, managing asynchronous requests (e.g., sending messages, fetching timelines), and handling complex Matrix operations within a Tokio runtime environment.

This skill covers implementing complex user interactions within Three.js scenes. It demonstrates techniques like raycasting for precise object selection and click detection, handling mouse and touch inputs, and integrating various camera controls (OrbitControls, FlyControls, FirstPersonControls). Use this when building highly interactive, immersive 3D web applications.

Vexor CLI is a powerful tool for developers needing to locate code, functions, or documentation sections within large repositories based on *intent* rather than exact keywords or file paths. It provides semantic discovery, making it invaluable when manual searching or simple text matching fails, helping developers understand the implementation logic across complex codebases.

Agent Analytics delivers CLI-first tracking, experimentation, and optimization so AI agents can monitor site traffic, run A/B tests, and measure funnels consistently across projects.

A comprehensive command-line interface (CLI) for expert administration and automation of Google Workspace services. It seamlessly integrates with Gmail, Drive, Sheets, Docs, and Calendar, building commands dynamically from Google's Discovery Service. Ideal for system administrators and developers needing to automate file management, bulk operations, security auditing, and complex API interactions.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

A comprehensive guide and script collection for auditing Google Cloud Platform IAM permissions. It helps identify overly permissive bindings, unused service accounts, primitive role usage, and cross-project access risks. It utilizes gcloud CLI, Policy Analyzer, and IAM Recommender to ensure compliance and minimize the blast radius of misconfigurations.

This solution guides the implementation of a phishing reporting button within email clients, creating a critical feedback loop for security teams. By integrating with SOAR platforms, reported suspicious emails undergo automated triage, including IOC extraction, sandbox analysis, and threat intelligence checks. The workflow enables rapid classification, automated remediation (e.g., mass retraction, sender blocking), and provides detailed feedback to the user reporter, significantly enhancing overall security posture.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.