Skill UI

A comprehensive skill designed for advanced security analysis, detecting malicious behaviors across mobile applications (Android/iOS). It performs multi-layered analysis, including static indicator checks (permissions, manifest), dynamic instrumentation via Frida, network traffic monitoring (C2 communication, exfiltration), and automated scanning (MobSF). Use this when investigating suspicious apps, detecting trojans, or performing malware triage.

A comprehensive skill for assessing mobile applications (Android and iOS) for vulnerabilities related to deep links, custom URI schemes, and intent handling. This skill identifies risks such as unauthorized access, data injection, intent hijacking, and improper validation of App Links or Universal Links, crucial for robust mobile security testing.

A comprehensive skill for detecting and exploiting JavaScript prototype pollution vulnerabilities in both client-side and server-side applications. It demonstrates advanced property injection techniques to achieve critical security outcomes, including Cross-Site Scripting (XSS), Remote Code Execution (RCE), and authentication/authorization bypass, especially in Node.js environments and JSON merging scenarios.

Configure Azure AD Privileged Identity Management via Microsoft Graph API to enumerate eligible and active assignments, request just-in-time activations, audit logs, and enforce MFA or approval policies for zero-trust privileged access scenarios.

This skill guides the implementation of security chaos engineering experiments. It involves deliberately degrading or disabling security controls (like WAF, firewalls, or log pipelines) in a controlled environment to rigorously verify the detection, alerting, and response capabilities of the Security Operations Center (SOC). Users learn to use tools like boto3 and Python to simulate failure scenarios and assess system resilience and compliance posture.

Astro is a modern web framework designed specifically for building high-performance, content-heavy websites like blogs, documentation sites, and portfolios. Its core innovation is the Islands Architecture, which ships zero JavaScript by default, drastically improving performance and Core Web Vitals. It supports multi-framework components (React, Vue, Svelte) in a single project, making it ideal for content developers prioritizing speed and flexibility.

This agent facilitates comprehensive debugging and testing of iOS applications running on a simulated environment. It leverages XcodeBuildMCP to manage the entire lifecycle, including building, running, interacting with the UI (tap, type, gesture), taking screenshots, and capturing detailed runtime logs. Use it whenever you need to simulate real-world app testing or diagnose issues on a booted simulator.

A comprehensive guide for building or reviewing SwiftUI User Interfaces that utilize the modern Liquid Glass aesthetic. This skill focuses on correctly implementing native Apple APIs (like `glassEffect` and `GlassEffectContainer`) while ensuring proper fallback mechanisms, modifier ordering, and performance for iOS 26+ devices. Ideal for adopting cutting-edge iOS design patterns.

A comprehensive guide detailing how to refactor large, complex SwiftUI views into smaller, more stable, and explicit components. It emphasizes adopting a lightweight state approach (favoring local state and environment variables over excessive view model layers) to improve data flow, readability, and overall code maintainability in modern iOS development.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

This skill guides users through evidence-based terminal operations. It is designed for scenarios requiring direct command execution, Git status checks, debugging CI/build failures, and pushing narrow, verified fixes. It emphasizes following a structured, minimal-scope workflow and accurately reporting the repository's current state (e.g., local changes vs. pushed code).

Comprehensive guide for implementing Firebase Cloud Messaging (FCM) in Flutter applications. Learn how to set up push notifications across iOS, Android, and Web, manage permissions, handle incoming messages in foreground, background, and terminated states, and properly manage FCM token lifecycles.