Skill UI

This guide details methodologies for identifying and exploiting XML External Entity (XXE) injection vulnerabilities in web applications. It covers basic file retrieval, blind XXE detection using out-of-band techniques, and data exfiltration, all critical steps during authorized penetration testing of XML-consuming APIs and services.

Hono is a minimal and ultrafast web framework built entirely on Web Standards (Request/Response/fetch). It allows developers to build high-performance APIs and full-stack applications that run seamlessly across multiple environments, including Cloudflare Workers, Deno, Bun, and Node.js. It is ideal for edge deployment, Backend for Frontend (BFF) layers, and type-safe backend services.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.

Automates comprehensive end-to-end Quality Assurance (QA) for deployed web applications. This skill performs multi-stage testing, including smoke tests, complex user interactions (forms, authentication), visual regression checks across breakpoints, performance monitoring (Core Web Vitals), and WCAG accessibility audits.

Gradio is a powerful Python library designed for creating interactive web user interfaces and showcasing machine learning demos quickly. This skill covers core patterns like Interface, Blocks, and ChatInterface, allowing users to build complex applications, components, and event-driven chatbots with minimal effort. Ideal for rapid prototyping and deep learning model visualization.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

This powerful tool utilizes Playwright to record high-quality, professional web application demo videos. It simulates natural user interactions, injecting a visible cursor overlay and adhering to specific pacing guidelines. It is ideal for creating comprehensive tutorials, feature walk-throughs, or documentation for stakeholders.

This guide provides comprehensive testing patterns for C# and .NET applications. It covers best practices using xUnit, FluentAssertions, and advanced techniques like mocking (NSubstitute/Moq), parameterized testing, and full integration testing using Testcontainers and WebApplicationFactory. Ideal for improving test quality, coverage, and developing robust, maintainable codebases.

This tool enables deep inspection and validation of web applications by connecting to the browser's DevTools Protocol (MCP). It allows agents to perform tasks like DOM inspection, capturing console logs, monitoring network requests, profiling performance, and taking screenshots in a live environment. Essential for debugging UIs, validating API integrations, and performing end-to-end automated testing.

This skill focuses on building production-quality, accessible, and responsive user interfaces. It involves creating components, implementing layouts, and managing state while adhering to design systems and WCAG standards. The goal is to avoid generic AI aesthetics and ensure the UI looks like it was built by a professional engineer. It covers component architecture, state management strategies, and design system adherence for high-quality web applications.

A comprehensive workflow covering the measurement, identification, and fixing of performance bottlenecks in frontend, backend, and database layers. It guides developers through best practices like measuring Core Web Vitals, implementing pagination, and resolving N+1 query patterns.

Security-first development practices for web applications. Covers threat modeling with STRIDE, OWASP Top Ten defenses, input validation, parameterized queries, authentication and session hardening, security headers, dependency auditing, and supply-chain risk assessment.