Skill UI

This skill provides structured procedures for managing NuGet packages in .NET projects and solutions. It strictly enforces the use of the `dotnet` CLI for adding, removing, and updating dependencies, prioritizing project integrity. It guides users through a mandatory workflow for version updates, including version verification and running `dotnet restore`, ensuring a stable and consistent development environment.

Creates an integration testing plan for .NET Oracle-to-PostgreSQL migrations by analyzing a project for data access artifacts, ranking them by migration risk, and outlining test cases, seed data, and Oracle-specific behaviors to validate.

Generates detailed prompts to document end-to-end application workflows by auto-detecting architectures, stacks, entry points, services, data access, error handling, and tests across .NET, Java/Spring, React, microservices, and other tech stacks.

Generates a complete, compilable xUnit integration test project structure for validating complex database migrations, specifically from Oracle to PostgreSQL, within .NET solutions. This scaffolding includes a transaction-rollback base class and a seed data manager, ensuring a robust environment for writing migration integration tests without requiring test cases. Ideal for setting up testing infrastructure before migration validation.

A comprehensive tool that analyzes complex codebases to generate detailed, structured architectural blueprints. It automatically detects and documents the entire technology stack, including primary languages (.NET, Java, Python, etc.), dependencies, versions, licensing, and implementation patterns. The output provides actionable documentation covering coding conventions, usage examples (API, data access), and visual architecture maps, ensuring consistency across guided software development projects.

A comprehensive CLI for managing the entire lifecycle of Windows applications. It handles initialization, building, packaging into MSIX, signing, debugging, and advanced UI automation via Microsoft UI Automation. Supports multiple modern frameworks including .NET, C++, Electron, Rust, and Flutter, streamlining the deployment process to the Microsoft Store.

A comprehensive guide providing best practices for Git workflows, covering adaptation strategies for major Chinese platforms (Gitee, Coding.net, etc.), branch naming conventions, standardized commit messaging (Chinese Conventional Commits), and CI/CD integration across various domestic environments. Helps streamline development processes for Chinese teams.

This is a detailed offensive checklist for identifying and exploiting insecure deserialization vulnerabilities across multiple programming languages (Java, Python, PHP, .NET, Node.js, etc.). It covers techniques like gadget chain generation, magic method abuse, type confusion, and modern attack vectors, providing a deep methodology for penetration testing and vulnerability research.

This skill provides a comprehensive operational checklist for identifying and exploiting HTTP Parameter Pollution (HPP) vulnerabilities. It details how various web technologies (ASP.NET, PHP, Python, etc.) handle duplicate parameters differently (e.g., first-wins, last-wins, concatenation). Use this skill during penetration testing to discover flaws in parameter parsing, which can lead to bypassing WAFs, performing logic manipulation, or achieving unauthorized access.

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

This guide assists developers in building robust Model Context Protocol (MCP) servers and clients using C#/.NET. It specifically targets the stable 1.x NuGet packages, providing detailed instructions for configuring various transports (STDIO, Streamable HTTP), defining custom tools, prompts, and resources. It helps solve common integration issues like stale preview pinning, complex HTTP wiring, and structured content handling, ensuring production-ready, standard-compliant code.

A comprehensive toolkit providing source generators and base classes for implementing the Model-View-ViewModel (MVVM) pattern in .NET applications. It simplifies the creation of observable properties, commands, and validation logic, significantly reducing boilerplate code. Supports major cross-platform UI frameworks including WPF, WinUI 3, MAUI, and Avalonia.