Skill UI

A comprehensive guide detailing how to identify and validate Cross-Site Scripting (XSS) vulnerabilities using Burp Suite's advanced tools (Repeater, Intruder, DOM Invader). This methodology covers reflected, stored, and DOM-based XSS, and includes strategies for bypassing security filters and Content Security Policy (CSP), making it essential for web application penetration testing and bug bounty programs.

A comprehensive guide and framework for assessing real-time WebSocket APIs (ws:// or wss://). This skill covers critical security checks, including Cross-Site WebSocket Hijacking (CSWSH), authentication bypass, message injection attacks, input validation flaws, and denial-of-service (DoS) via message flooding. It utilizes tools like Burp Suite and Python for simulating malicious payloads and ensuring secure real-time communication channels.

This skill provides a comprehensive guide on securely integrating and calling Firebase Cloud Functions from Flutter applications. It covers the proper use of `httpsCallable` to invoke structured server-side logic, handling data serialization, implementing robust error handling (including permission denial and timeouts), configuring regional deployments, and utilizing the Firebase Emulator Suite for reliable local testing.

A comprehensive guide to stretchr/testify for Go development. It covers best practices for writing readable unit tests, including the crucial distinction between `assert` and `require`. Learn advanced assertions (like `JSONEq` and `Eventually`), how to use `testify/mock` to isolate components, and structuring complex tests using `testify/suite`. Essential for professional Go projects.

Test-driven development requires writing a failing test before any implementation so logic, bug fixes, and behavioral changes are always backed by proof; it is ideal for guarding refactors and ensuring regressions stay caught by the automated suite.

Comprehensive Go testing guidance that spans table-driven subtests, testify suites, mocking, unit/integration tests, benchmarks, coverage, fuzzing, goleak leak detection, snapshot checks, and GitHub Actions CI to keep production suites reliable.

This skill automates the comprehensive localization and translation of an entire MkDocs documentation suite. It translates all Markdown files from source English folders into a specified target language, preserving the exact folder structure and Markdown formatting. Additionally, it updates include references and modifies the core mkdocs.yml configuration file to properly support the new locale, ensuring a seamless multilingual documentation setup.

Guides on structuring NUnit test projects, naming fixtures, arranging tests, and applying standard plus data-driven attributes along with assertions and mocking tactics to keep suites clear, independent, and repeatable.

Provides guidance on organizing and writing focused XUnit unit tests, covering project setup, fact/theory patterns, assertions, mocking, and data-driven testing for reliable .NET test suites.

Use Composio's Rube MCP suite to orchestrate Pipedrive CRM workflow tasks—deals, contacts, activities, notes, and pipelines—by first calling RUBE_SEARCH_TOOLS for schemas and keeping the connection active before executing each workflow.

Generates Power Platform custom connectors with MCP integration for Copilot Studio, covering schema generation, JSON-RPC scripts, validation, troubleshooting, OAuth hardening, and CLI guidance for paconn/pac workflows.

This tool helps developers run comprehensive test suites using pytest and generates detailed code coverage reports. It identifies specific lines of code that have not been covered by tests, guiding developers to improve test quality until 100% coverage is achieved. Use it to ensure robust and reliable software.