Skill UI

Generates a complete, self-contained HTML dashboard for analytics, admin, or control panel views. It structures the layout with a fixed sidebar, top navigation, KPI cards, and detailed charts (using inline SVG). Ideal when the brief requires visualizing key metrics, performance over time, or operational statistics.

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

This module provides essential abstractions for managing language data within the admin panel. It includes `LanguageDto` for strongly typed data structures and `useLanguages` hook for fetching and handling language-related state and logic. Use this when developing administrative features that require language catalog management.

The Form Model system provides a comprehensive, declarative way to build complex user forms. It supports defining various field types (Text, Number, DateTime, File, Object, etc.) using a fluent builder API. Developers can control layout, apply advanced validation (Zod), implement conditional visibility/disability rules, and handle complex data structures like nested objects and dynamic zones, making it ideal for building advanced admin interfaces.

This is a comprehensive lookup reference for the Mercury MCP server tools. It guides AI agents on how to interact with a virtual team workspace, enabling structured communication for messaging teammates, managing threads and tasks, scheduling complex automations, and performing administrative graph edits. Use this when your agent needs to execute specific team workflows.

A comprehensive guide to achieving compliance with the HIPAA Security Rule (45 CFR Part 164). This skill outlines the mandatory steps to protect electronic Protected Health Information (ePHI), including conducting thorough risk analyses, deploying administrative, physical, and technical safeguards, managing Business Associate Agreements (BAAs), and preparing for breach notifications and OCR audits. Essential for Covered Entities and Business Associates.

This toolkit provides comprehensive offensive and administrative capabilities for Microsoft Entra ID, Azure AD, and AD FS. It allows authorized penetration testers to perform unauthenticated reconnaissance, acquire various access tokens, and critically, test for federation backdoors (Golden SAML). It is essential for validating identity-attack resilience and producing detailed hardening recommendations during red-team engagements.