Skill UI

Analyzes CORS configurations via the cors-policy-validator plugin to spot misconfigurations, validate headers or files, and report vulnerabilities so developers can secure web apps and APIs from unsafe cross-origin access.

This file serves as the dedicated translation resource for the MCP Server Patterns library. It is used to localize key strings and texts to ensure accurate user experience across different languages. Developers should refer to the original skill file for the core English content.

A comprehensive guide for authorized penetration testers on identifying and exploiting Cross-Site Request Forgery (CSRF) vulnerabilities. This skill covers analyzing state-changing requests, testing anti-CSRF token implementations, and verifying defenses like SameSite cookies and Origin/Referer header validation using tools like Burp Suite.

This skill provides a comprehensive guide and methodology for identifying and exploiting Cross-Origin Resource Sharing (CORS) misconfigurations in web applications. It covers testing origin validation bypasses, analyzing preflight requests, and simulating data exfiltration during authorized penetration tests, crucial for assessing API security.

This comprehensive guide provides solutions for common and complex errors encountered when using WebContainer and StackBlitz environments. It covers essential fixes for cross-origin isolation headers (COOP/COEP), managing WebContainer boot failures using singleton patterns, resolving npm installation hangs, and handling file system errors (ENOENT). Use this skill to stabilize and debug complex web development sandboxes.

This bundle collects comprehensive diagnostic information about the WebContainer environment. It checks the boot state, file system integrity, running process list, and modern browser support (e.g., SharedArrayBuffer, cross-origin isolation). Essential for developers integrating with StackBlitz SDK or WebContainers to troubleshoot complex development issues.

This guide details how to install and configure the WebContainer API, enabling client-side Node.js execution directly in the browser. It also provides instructions for integrating the StackBlitz SDK, which is used for embedding highly interactive code editors into web applications. The guide covers necessary dependency installations, code examples, and crucial HTTP header configuration (COOP/COEP) required for cross-origin isolation and secure operation.

A comprehensive guide to setting up a local development loop for WebContainer applications. This setup utilizes Vite for a modern development environment, providing hot module replacement (HMR) and cross-origin policy configuration. It includes detailed steps for running Vitest tests, ensuring file system operations and browser-based IDE features function correctly in a simulated local environment.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

This skill provides comprehensive testing for WebSocket APIs, covering protocol basics, Cross-Site WebSocket Hijacking (CSWSH), and common security flaws. Use it when testing applications that rely on real-time communication, chat features, or persistent data streams. It validates Origin checks, session binding, and message integrity.

This skill captures and persists critical user decisions, project constraints, and architectural choices across multiple sessions and agents. It saves this context into a structured memory database (`mdbase`), ensuring that future development steps or agents can retrieve the original intent without re-deriving it from scratch. Ideal for documenting project rules, tech stacks, and design rationale.

This skill facilitates structured, bidirectional reading and knowledge synthesis for academic texts, theories, and articles. It forces users to first capture the source material's original intent, before critically mapping its relationships, conflicts, and absorptions against the CrossFrame framework. It ensures structured output with clear source boundaries, making it ideal for deep learning and scholarly work.