Skill UI

Guides Spring Boot 3.x engineers through configuration scaffolds, REST controllers, Spring Security 6 authentication flows, Spring Data JPA repositories, and reactive WebFlux endpoints, making it easier to build microservices and Java REST APIs.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

Provides a structured reference of the 100 most critical web application vulnerabilities organized by category, helping security teams identify attack vectors, assess impacts, and follow remediation guidance during audits or penetration tests.

This skill scans web application endpoints and cookies to spot missing CSRF safeguards—tokens, double-submit cookies, SameSite attributes, and origin checks—then documents vulnerable paths and mitigation steps for security reviews.

A comprehensive guide for implementing secure and reliable webhook endpoints to handle Vercel deployment lifecycle events. This skill covers signature verification (HMAC) to ensure security, processing key events (e.g., deployment.ready, deployment.error), and implementing idempotency to prevent duplicate actions. Ideal for building automated CI/CD integrations, status notifications, or custom project hooks that react to deployment changes in real-time.

Automates Web Application Firewall rule creation by guiding advanced security teams through best practices, code generation, and validation for compliant penetration-testing workflows.

Guidelines for reviewing UI code against web interface best practices, covering accessibility, performance, responsive design, component patterns, CSS practices, security, and internationalization during audits or UX evaluations.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

Master advanced testing strategies for smart contracts using industry-leading frameworks like Hardhat and Foundry. This skill covers unit testing, integration testing, gas optimization analysis, fuzzing for edge cases, and simulating real-world mainnet interactions via forking. Ideal for ensuring the security and reliability of decentralized applications (DApps).

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.