Skill UI

This skill acts as a frontend security specialist to detect Cross-Site Scripting (XSS) vulnerabilities in React, Vue, Angular, and vanilla JavaScript code. It performs static analysis to identify unsafe DOM manipulation, improper sanitization, and injection points. The tool helps developers secure client-side applications by highlighting dangerous patterns like innerHTML usage, URL injection risks, and framework-specific security issues such as dangerouslySetInnerHTML or v-html directives. It provides severity ratings and remediation suggestions for CWE-79 vulnerabilities.

Create stunning, animation-rich HTML presentations from scratch or convert PowerPoint files. Ideal for talks, pitches, and reports. Zero-dependency, browser-based, with distinctive design and fixed 16:9 stage.

Analyze health data trends and patterns over time, including weight, symptoms, medications, and lab results. Identify correlations and significant changes to provide data-driven insights. Supports multi-dimensional analysis and generates interactive HTML visualization reports using ECharts. Ideal for tracking health improvements and monitoring risks.

This skill enables identification and testing of HTML injection vulnerabilities in web applications to assess security risks. It involves using tools like Burp Suite and understanding HTTP structures. Strictly for authorized security assessments, defensive validation, or educational purposes in controlled environments.

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

Builds compact, standalone multi-lesson course artifacts in HTML/CSS/JS with lesson navigation, objectives, flashcards, quizzes, progress tracking, and clickable source links for any topic.

Removes Lovable.dev scaffolding from Vite + React projects including dependencies, branding, placeholder assets, and generated documentation. Helps developers ship clean, ownable codebases after exporting from Lovable. Audits package.json, vite.config.ts, index.html, and source files for Lovable fingerprints.

Integrate the alpha markstream-angular renderer into Angular 20+ apps with standalone components, signals, safe HTML defaults, and optional peer features. Includes installation, configuration, and usage examples.

This skill enables developers to override Markstream node renderers and add trusted custom tags across Vue, React, Svelte, and Angular. It allows scoped or renderer-local mappings without replacing the parser. Useful for customizing built-in elements or rendering specific tags like thinking. It emphasizes security by treating custom tags as trusted input and maintaining safe HTML policies.

Integrate the beta Markstream React renderer into React 18+ or Next.js projects. It handles client/server entrypoints, CSS, streaming state, and component overrides securely. Configure for live chat or streaming answers with proper SSR boundaries. Supports markdown parsing with safe HTML policies and Mermaid diagrams. Requires React 18+ and careful dependency management.

Guide for integrating markstream-vue into a plain Vue 3 application, covering renderer modes (chat, docs, minimal), code rendering options (pre, shiki, monaco), streaming state management, long-message virtualization, scoped component overrides, and security considerations for safe HTML and Mermaid rendering.

This skill generates ready-to-use CI/CD pipeline configurations for automated API testing using Newman. It supports multiple platforms including GitHub Actions, GitLab CI, Jenkins, Azure DevOps, and CircleCI. Users can specify collection sources, environment variables, and report formats like JUnit or HTML. The generated scripts install Newman and execute Postman collections within the pipeline, ensuring consistent API quality checks across different development environments.