Skill UI

This skill empowers you to implement secure backend coding practices, focusing on input validation, authentication, and API security. It covers vulnerability prevention, defensive programming, and secure architecture implementation. Ideal for building security-first applications that resist common attack vectors like SQL injection, XSS, and CSRF. Includes expertise in database protection, secret management, and HTTP security headers.

This skill ensures code adheres to security best practices and identifies vulnerabilities. It is used for authentication, authorization, input validation, file uploads, and API development. It covers secrets management, SQL injection prevention, XSS protection, and secure session handling.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

Authorized security assessment of PostgreSQL, MySQL, MSSQL, MongoDB, and Redis: exposure and TLS review, account role and grantee analysis, dangerous configuration checks (file_priv, xp_cmdshell, COPY PROGRAM, UDF), NoSQL injection, and audit log posture.

This skill involves testing AI agents for direct prompt injection vulnerabilities where user messages attempt to override system instructions. It focuses on role confusion and instruction hijacking without external content, ensuring agents maintain security boundaries against direct manipulation attempts.

This skill guides the development of production-grade APIs, MCP servers, and enterprise backends using modern C#/.NET best practices. It covers essential architectural components such as dependency injection (DI), advanced caching strategies (e.g., Redis), data access optimization with EF Core/Dapper, and implementing resilience patterns, ensuring robust and scalable software design.

This skill focuses on reversing JavaScript-based custom DSL and Virtual Machine interpreters, commonly found in risk-control and captcha engines. It involves identifying IIFE and switch-based opcode dispatch patterns, extracting opcode tables, and capturing runtime semantics. The workflow includes static analysis for variable mapping and opcode classification, as well as runtime injection techniques to understand exported functions. It excludes standard WASM and typical Webpack bundles.

Build production-ready FastAPI projects with async patterns, dependency injection, middleware, and error handling. Ideal for new Python REST APIs, microservices, and high-performance web backends.

Identify bugs, security vulnerabilities, and code quality issues in local branch changes. Designed for reviewing code diffs and conducting security audits. Involves mapping attack surfaces, checking injection flaws, authentication issues, and risks. Provides structured verification against changed files, prioritizing security over style.

This skill provides functional programming patterns for building type-safe and testable backend services using fp-ts in Node.js or Deno environments. It covers dependency injection, service composition, and handling typed backend errors with ReaderTaskEither. Ideal for developers implementing functional architecture principles in modern JavaScript runtimes to ensure robust and maintainable server-side applications.

This skill acts as a frontend security specialist to detect Cross-Site Scripting (XSS) vulnerabilities in React, Vue, Angular, and vanilla JavaScript code. It performs static analysis to identify unsafe DOM manipulation, improper sanitization, and injection points. The tool helps developers secure client-side applications by highlighting dangerous patterns like innerHTML usage, URL injection risks, and framework-specific security issues such as dangerouslySetInnerHTML or v-html directives. It provides severity ratings and remediation suggestions for CWE-79 vulnerabilities.

This skill enables identification and testing of HTML injection vulnerabilities in web applications to assess security risks. It involves using tools like Burp Suite and understanding HTTP structures. Strictly for authorized security assessments, defensive validation, or educational purposes in controlled environments.