Skill UI

A comprehensive guide for migrating and integrating with the Wispr Flow voice-to-text API. This skill details best practices for both WebSocket (low-latency streaming) and REST API methods. It covers authentication, optimal audio formatting (16kHz mono PCM), context awareness for specialized jargon (e.g., code), and robust error handling across multiple platforms (Mac, iOS, browser).

A comprehensive guide for integrating the Wispr Flow voice-to-text API using webhooks. This skill covers best practices for real-time speech recognition, including low-latency WebSocket streaming and robust REST API calls. It is essential for developers building voice-powered applications, dictation tools, or any system requiring advanced audio processing and context-aware transcription.

A browser-based skill for search, web scraping, login-required actions, and dynamic page interaction. Use it to access real websites, extract content, and operate pages in a live Chrome environment.

Captures complete, full-page screenshots of any modern web page using the Chrome DevTools Protocol (CDP). Unlike standard tools, this utility handles Single Page Applications (SPAs), scrolling content, lazy-loaded images, and complex scroll containers, ensuring the entire visible content is captured in a single, high-fidelity PNG file. Ideal for documenting complex web flows and testing.

This skill guides the systematic migration of Java enterprise code from the legacy `javax.*` namespace to the modern `jakarta.*` namespace. It is essential for developers upgrading applications to Jakarta EE 10 or running on Tomcat 11+. The process covers updating imports, modifying dependency coordinates in build files (pom.xml), and adapting web deployment descriptors.

Create a single-file HTML presentation deck in an editorial magazine and e-ink style, with swipe navigation, WebGL fluid backgrounds, serif headlines, sans-serif body text, and modular layouts for talks, launches, and shareable presentations.

This skill generates a complete, standalone, and highly structured pricing page in standalone HTML. It automatically respects the active design system (colors, typography, components) and supports defining 2-4 plan tiers, including feature cards, comprehensive comparison tables, and an FAQ section. Ideal for product marketing and sales-focused websites.

Performs a comprehensive external audit of a deployed repository's state, going beyond simple code review. It checks for critical production gaps, including RLS misconfigurations, webhook idempotency issues, secret exposure, deployment health, and prompt injection vulnerabilities. Ideal for pre-launch gates and ensuring code stability before going live.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.