Skill UI

This module provides essential abstractions and hooks (BuildParam, BuildParams, useBuildParams) for managing build parameters within the administrative interface. It allows developers to centralize the definition, retrieval, and usage of configuration parameters required for the application's setup and various features, ensuring clean and type-safe access to build-time variables.

This module serves as the centralized catalog for administrative configurations within the Webiny API context. It provides key abstractions, such as AdminConfig, allowing developers to reliably access and manage application settings. Developers must import the specific abstraction and review the source file for accurate interfaces and types to ensure proper implementation.

This module provides essential abstractions for managing and accessing environment configurations within the admin panel. It introduces `EnvConfig` (for static type/instance access) and `useEnvConfig` (a hook for component usage). It ensures that environment-specific settings (such as API endpoints or keys) are managed centrally, improving code modularity and maintainability across different deployment environments.

This utility provides key abstractions for integrating with the webiny administration API using GraphQL. It serves as a centralized catalog, guiding developers on how to correctly import and utilize pre-defined GraphQL client structures. By enforcing standardized interfaces and types, it ensures type safety and consistent data interaction patterns across the application's administrative features, streamlining data fetching in complex admin contexts.

This module provides the core `Logger` abstraction for structured logging within the Webiny API context. It supports multiple logging levels (e.g., debug, info, warn, error), ensuring that developers can record application events and operational data systematically. Using this abstraction helps in centralized logging, which is crucial for debugging, monitoring, and maintaining system health.

This guide details the complete architecture and organizational principles of a Webiny project. It covers the core concepts of the flat folder structure, the role of the central `webiny.config.tsx` file, and how to register various types of extensions (API, Admin UI, Infrastructure, and CLI Commands) using declarative JSX components. Use this when developers need to understand where custom code belongs and how to integrate different functional components into the platform.

Methodology for red team testing of on-prem Active Directory, hybrid AD/Entra ID, and ADCS. Covers reconnaissance, credential abuse, privilege escalation, lateral movement, persistence, trust abuse, and Defender for Identity evasion.

This skill serves as the central entry point for comprehensive API security testing. It guides testers to systematically categorize and prioritize potential vulnerabilities by focusing on core dimensions such as documentation review (Recon), object-level authorization (BOLA), token integrity (JWT), and complex data structures (GraphQL/Hidden Params). Use this as the initial step when assessing a new REST or GraphQL endpoint.

A comprehensive playbook detailing advanced exploitation techniques in decentralized finance (DeFi). Covers flash loan mechanics, price oracle manipulation (spot vs. TWAP), MEV extraction strategies (Sandwich, JIT), governance exploits, and core smart contract vulnerabilities. Essential for security auditors and risk analysts.

A comprehensive playbook covering advanced smart contract audit techniques for Solidity/EVM. Focuses on critical patterns like reentrancy (cross-contract), integer overflows, access control misuse, delegatecall exploits, flash loans, and advanced MEV/front-running attacks. Essential for securing DeFi protocols.

WizTelemetry Notification is the core notification component of the KubeSphere observability platform. It ingests alerts, cloud events, and audit logs in a multi-tenant Kubernetes environment. It intelligently routes and distributes notifications to various channels (Email, Slack, DingTalk, etc.) based on sophisticated label matching and predefined routing rules, ensuring reliable and targeted communication in complex cloud deployments.

This skill acts as a central orchestrator for comprehensive SEO optimization across various digital platforms (GitHub, LinkedIn, CV, X/Twitter). Use it when your request is broad, ambiguous, spans multiple surfaces, or requires developing an overall digital presence strategy. It intelligently routes tasks to the correct module while managing context and ensuring a coherent cross-platform workflow.