Skill UI

This skill specializes in writing, debugging, and refactoring modern JavaScript code (ES2023+). It covers advanced patterns like async/await, Promise handling, ESM modules, and optimal performance for both browser and Node.js environments. Use it for vanilla applications, complex async flows, and performance optimization.

This tool helps detect Broken Object Property Level Authorization (BOPLA) vulnerabilities, which are critical security flaws detailed in OWASP API3:2023. It scans APIs for excessive data exposure (reading sensitive fields) and mass assignment risks (modifying unintended properties) by simulating malicious requests and analyzing responses. Ideal for security testing, threat hunting, and implementing robust API security controls.

This skill guides security testers in identifying excessive data exposure in REST and GraphQL APIs. It involves intercepting API responses and analyzing them for leaked Personally Identifiable Information (PII), internal identifiers, or sensitive business data that the client UI does not display but the API transmits. It maps directly to OWASP API3:2023 Broken Object Property Level Authorization, helping prevent data leaks via over-fetching.

This skill provides specialized internal auditing capabilities for ISO/IEC 42001:2023 AIMS. It helps compliance teams assess gaps across Clauses 4-10, build comprehensive AI risk registers with control mapping, and plan structured internal audits (Clause 9.2). Ideal for pre-certification readiness, scoping internal audit cycles, or integrating AI systems into existing quality/security management systems (ISMS/QMS).