Skill UI

This pattern provides a comprehensive guide to implementing domain event handlers (before/after hooks) within the Webiny framework. It emphasizes the 'thin orchestrator' principle, requiring handlers to delegate all business logic to reusable service abstractions or UseCases for maximum reusability. Furthermore, it details the process of defining, publishing, and reacting to custom domain events, ensuring a clean, decoupled architecture.

This skill provides a robust mechanism for extending an existing API gateway by adding custom, non-GraphQL HTTP endpoints (GET, POST, PUT, etc.). Developers can implement the Route.Interface and register it using the <Api.Route> component. It supports full Dependency Injection (DI), providing framework-agnostic Request and Reply objects, making it ideal for integrating complex business logic directly into the API structure.

This guide details the UseCase pattern, an architectural pattern used to encapsulate specific business operations within the Webiny framework. Learn how to define UseCases as injectable dependencies, manage input and output using the structured Result<T, E> type, and implement robust, domain-specific error handling. Mastering this pattern is crucial for building highly modular, testable, and maintainable backend APIs.

This tool analyzes and refactors code to detect and correct anemic domain models. It enforces rich domain modeling patterns (Entities, Value Objects, Aggregates, Domain Events), improving encapsulation and business logic ownership. Use it when validating, reviewing, or refactoring core domain logic to ensure adherence to Domain-Driven Design (DDD) principles.

Logic Lens is an advanced AI skill that performs deep, formal logic-driven code review. Unlike standard linters, it analyzes code for complex issues like race conditions, security vulnerabilities (SQL injection, XSS), type safety flaws, and algorithmic errors across 9 critical risk categories. It is ideal for pre-merge PR reviews, auditing sensitive code paths, and refactoring complex business logic.

This router guides the testing of systemic flaws in business processes and state machines. It is essential when vulnerabilities stem from workflow abuse, race conditions, pricing flaws, or multi-step state attacks, rather than simple input sanitation issues. Use it to test complex business flows like payments, inventory management, and approval sequences.

This playbook is designed for advanced vulnerability assessment, covering flaws invisible to automated scanners. It guides testing for race conditions, complex workflow bypasses, state machine manipulation, financial parameter tampering (e.g., price/quantity manipulation), and coupon/credit abuse in multi-step applications. Essential for deep manual security testing.

A comprehensive, top-level routing skill for authorized web security assessment, bug bounty hunting, and API penetration testing. It guides the agent through a structured methodology, covering the entire attack lifecycle from reconnaissance and vulnerability triage (XSS, SQLi, IDOR, etc.) to advanced business logic flaw identification. Use this skill to ensure thorough, systematic security analysis.

HTTP Parameter Pollution (HPP) occurs when a single request contains multiple instances of the same parameter key. Different components in the request path (e.g., WAFs, proxies, application frameworks) may parse these duplicate keys using different rules (first value, last value, array join). This skill teaches how to exploit these discrepancies to bypass security checks, execute SSRF, or manipulate business logic.

A comprehensive methodology for identifying critical vulnerabilities in transactional applications (e-commerce, fintech, SaaS). This goes beyond standard OWASP Top 10 checks, focusing on flaws like workflow bypass, state machine violations, price manipulation, and role boundary abuse. It guides testers to map application flows, identify hidden endpoints, and quantify the potential financial impact of logic failures.

Comprehensive patterns and tools for writing robust tests for F# applications within the modern .NET ecosystem. This guide covers unit testing (xUnit, FsUnit), property-based testing (FsCheck), mocking dependencies (NSubstitute), and full integration testing (WebApplicationFactory). Ideal for improving test coverage, validating complex business logic, and establishing a resilient testing infrastructure.

This comprehensive skill provides foundational knowledge in core marketing concepts, psychological principles, and strategic frameworks. It covers the entire customer journey, from initial awareness (TOFU) through consideration, decision, and advocacy. Users can apply advanced models like the Funnel Model, Value Proposition Canvas, and Positioning Statements to structure effective campaigns, refine messaging, and measure key business results.