Skill UI

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

Runs a comprehensive, systematic QA check on Figma designs to ensure they are production-ready before handing off to engineering. The checklist rigorously evaluates file hygiene, component consistency, accessibility (WCAG AA), content completeness, and overall readiness across multiple platforms (iOS/Android/Web). Use this skill when needing to validate a design’s quality and structure to prevent costly development rework.

A comprehensive guide to implementing the iconic Cyberpunk aesthetic across multiple platforms (Web, iOS, Android, Flutter). This guide details core principles like Neon-on-Black color schemes, sharply angled geometries (using clip-path or custom clippers), and glitch effects. It is ideal for developers needing to create high-tech, dystopian, or hacking interface experiences.

This comprehensive guide outlines the principles and technical implementation for creating highly accessible, high-contrast user interfaces. It ensures WCAG AAA compliance by specifying pure black/white color pairings, clear boundaries, and legible typography across web (CSS), iOS (SwiftUI), and Android (Flutter) platforms. Ideal for applications requiring maximum legibility and stark visual impact.

A comprehensive guide for implementing Monochromatic User Interfaces across Web, iOS, and Android. Learn how to achieve high elegance and strict color discipline by restricting the palette to variations (tints, tones, shades) of a single base hue. Includes detailed CSS, SwiftUI, and Flutter examples, emphasizing accessibility, texture usage, and color theory principles.

A comprehensive style guide and implementation toolkit for achieving authentic vintage aesthetics, inspired by 60s-80s retro design. It covers core principles like warm, muted color palettes, subtle noise textures, and classic typography pairings. Provides detailed code examples for Web (CSS), iOS (SwiftUI), and Android (Flutter) to recreate the analog, nostalgic feel in modern applications.

This guide details the principles and implementation techniques for Skeuomorphism—the design style that makes digital interfaces resemble real-world physical objects. It covers core principles like realistic textures (wood, leather), physical lighting, depth, and real-world metaphors. Provides detailed code examples for Web (CSS), iOS (SwiftUI), and Android (Flutter) to achieve highly realistic, tactile UI elements.

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

This skill generates robust, production-grade Appium automation scripts for both Android and iOS. It supports multiple languages (Java, Python, JavaScript) and guides users through best practices for cross-platform testing, including proper locator strategies, explicit waiting, and complex gestures. Ideal for automating mobile QA processes on local emulators or cloud real device farms.

This guide details how to integrate Expo and React Native into existing native iOS or Android applications (brownfield development). It addresses the core challenge of adopting new technology incrementally, outlining two distinct approaches: Isolated (consuming prebuilt AAR/XCFramework) and Integrated (adding sources directly to existing build systems like Gradle/CocoaPods).