Skill UI

This comprehensive tool validates web applications against WCAG 2.1/2.2 accessibility standards. It combines automated scanning using industry-leading tools (like axe-core, Lighthouse) with crucial manual checks for keyboard navigation, ARIA implementation, and color contrast. It is essential for QA teams and developers who must ensure high usability and accessibility for all users, including those relying on screen readers.

Conducts detailed accessibility audits for web apps via the accessibility-test-scanner plugin, verifying WCAG 2.1/2.2 compliance, ARIA usage, keyboard navigation, and screen reader compatibility while providing remediation guidance when accessibility or compliance checks are requested.

Guide to mastering essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless checks, and compliance reporting, covering selection, configuration, and practical workflows.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Comprehensive checklist for application security hardening, covering input validation, output encoding, SQL/CSRF defenses, security headers, JWT best practices, secrets handling, rate limiting, and dependency audits to keep web services resilient.

Perform Static Application Security Testing (SAST) to identify critical security vulnerabilities, including SQL injection, XSS, hardcoded secrets, and path traversal, directly from source code. Supports multi-language ecosystems (Python, JavaScript, Java, Go, etc.) and major frameworks, enabling crucial pre-deployment security validation and compliance checks (OWASP, PCI-DSS).

This central skill specializes in performing comprehensive threat modeling using STRIDE and calculating risk via DREAD scoring. It guides users through defining scope, identifying threats, and planning mitigations for new architectures. Crucially, it acts as a security router, directing specialized requests—such as pen-testing, incident response, cloud posture checks, and AI security reviews—to the appropriate dedicated skill.

A comprehensive collection of diagnostic scripts designed for troubleshooting Sentry integration failures. This bundle collects SDK versions, runtime configuration details (e.g., DSN, environment), and performs network connectivity checks to the Sentry ingest endpoint. Use it when events are not appearing in Sentry, or when systematically diagnosing complex setup issues across Node.js and Python environments.

This comprehensive guide covers the full stack of Shopify development. Learn to build robust custom applications, highly customized extensions (for checkout, admin, and POS), and dynamic storefront themes. It details using GraphQL Admin API, managing webhooks, and utilizing Liquid for templating, enabling developers to integrate external services and enhance the entire merchant e-commerce experience.

Analyzes existing Rails applications to provide a comprehensive and detailed upgrade assessment. This tool checks current gem and JavaScript dependencies, compares the running version against the latest stable release, fetches official upgrade guides, and generates diff reports. It assesses upgrade complexity (Small, Medium, Large) to ensure smooth and safe version migration for Ruby on Rails projects.

This comprehensive guide details the process for upgrading the Speak SDK, migrating data between various language learning platforms (such as Duolingo or Babbel), and handling critical API version deprecations. It provides structured steps for version checking, dependency upgrades, and implementing complex data mapping logic to ensure a smooth transition to production-ready systems.

This skill scans web application endpoints and cookies to spot missing CSRF safeguards—tokens, double-submit cookies, SameSite attributes, and origin checks—then documents vulnerable paths and mitigation steps for security reviews.