Skill UI

A comprehensive guide detailing Apple's Human Interface Guidelines (HIG) for building adaptive and consistent user interfaces. It covers best practices for layout architecture, navigation patterns (e.g., Tab Bars, Sidebars, Split Views), and component usage across multiple platforms, including iOS, iPadOS, macOS, and visionOS. Essential for developers aiming for a native, high-quality user experience.

A specialized skill designed for agents to proactively identify, analyze, and strategize high-impact contributions within trending Open Source repositories. It systematically performs repository discovery, extracts targeted issues (like 'help wanted' or 'good first issue'), and conducts deep feasibility analysis (including mergeability and complexity). Finally, it generates a structured 'Contribution Dossier' with actionable plans, significantly accelerating the process of becoming a top-tier OSS contributor.

Scans Substrate/Polkadot FRAME pallets for seven critical vulnerabilities such as arithmetic overflow, panic DoS, incorrect weights, unsigned validation issues, bad randomness, and origin flaws, making it ideal for runtime audits and pre-launch security assessments.

Provide REST API access to ClinPGx, the successor to PharmGKB, for querying gene-drug interactions, CPIC/DPWG/FDA guidelines, allele functions, and evidence that supports precision dosing and pharmacogenomics-driven clinical decisions.

FluidSim is a Python-based CFD framework offering pseudospectral solvers (2D/3D Navier-Stokes, shallow water, stratified flows) with FFT, MPI, Pythran/Transonic acceleration, and rich output analysis for turbulence or geophysical studies.

Produces 50+-page market research dossiers with consulting-style LaTeX formatting, deep data lookups, strategic frameworks, and automated visual assets for investment and planning briefs.

This skill provides a systematic methodology for building comprehensive threat actor profiles using Open-Source Intelligence (OSINT). It involves gathering, correlating, and analyzing publicly available data from diverse sources (e.g., vendor reports, dark web forums, code repositories). Users can map adversary TTPs to MITRE ATT&CK, assess motivations, and build structured dossiers for proactive defensive strategies and attribution assessments.

This guide details the implementation of robust API abuse detection mechanisms. It covers advanced rate limiting techniques, such as the Token Bucket and Sliding Window algorithms, to defend APIs against DDoS attacks, brute force attempts, and credential stuffing. It emphasizes using distributed stores like Redis for accurate, scalable, and adaptive security controls in an API gateway context.

A comprehensive guide to configuring multi-layered DDoS protection using Cloudflare. This skill covers mitigating volumetric (L3/4) and application-layer (L7) attacks by setting up managed rulesets, Web Application Firewall (WAF) rules, rate limiting, and Bot Management. Ideal for strengthening security architecture and meeting compliance standards.

This tool simulates advanced security testing to identify vulnerabilities in API rate limiting. It bypasses throttling controls by manipulating request headers (like X-Forwarded-For spoofing), varying source IP addresses, and manipulating endpoint paths. Essential for assessing API resilience against brute-force attacks, credential stuffing, and resource exhaustion, aligning with OWASP API Security guidelines.

This tool performs comprehensive security testing on GraphQL APIs by generating deeply nested, recursive, or highly repetitive queries. It specifically aims to identify Denial-of-Service (DoS) vulnerabilities and resource exhaustion issues by overwhelming the server's CPU, memory, or database connections. Essential for security auditors and penetration testers.

A comprehensive guide and framework for assessing real-time WebSocket APIs (ws:// or wss://). This skill covers critical security checks, including Cross-Site WebSocket Hijacking (CSWSH), authentication bypass, message injection attacks, input validation flaws, and denial-of-service (DoS) via message flooding. It utilizes tools like Burp Suite and Python for simulating malicious payloads and ensuring secure real-time communication channels.