Skill UI

This guide provides detailed instructions for setting up a local development loop using the Wispr Flow voice-to-text API. It covers connecting via WebSocket (recommended for low latency) or REST API, handling authentication, and optimizing audio input. Ideal for building voice-powered applications, dictation tools, or integrating sophisticated voice command features into existing SaaS products.

A detailed playbook covering CRLF (Carriage Return Line Feed) injection techniques. This exploit targets insecure handling of user input within HTTP response headers (e.g., Location, Set-Cookie) or log files. It demonstrates advanced attacks like response splitting, XSS escalation via double CRLF, cache poisoning, and session fixation, essential for deep security testing.

This skill simulates a comprehensive international journal peer review process by dynamically configuring a 5-seat review panel. It includes a Journal-Fit Reviewer, three peer-review roles, and a Devil's Advocate to challenge core arguments. The system automatically identifies the paper's field and methodology, then generates five role-separated review reports followed by a structured Editorial Decision Letter and Revision Roadmap. It supports various modes including full review, re-review, quick assessment, and reviewer calibration, handling inputs in multiple languages.

This utility reads structured JSON outputs from multi-search-engine APIs (e.g., Google Scholar, arXiv) provided via standard input. It converts these normalized records into a clean, minimal BibTeX format, suitable for academic papers. It intelligently preserves crucial metadata like DOI, authors, and years while automatically handling data sanitization, deduplication of DOIs, and protecting complex fields like corporate names.

This comprehensive skill provides best practices for secure coding across multiple domains. It guides developers on managing secrets, validating user input, preventing SQL injection, implementing robust authentication and authorization (including RLS), and mitigating XSS attacks. Use this when handling sensitive data, APIs, or user-generated content to ensure the highest level of security.

A comprehensive guide for generating and manipulating images using Gemini models within a Flutter/Dart environment powered by Firebase AI. This skill covers best practices for multi-modal API calls, interpreting interleaved text and image responses, troubleshooting common setup issues (billing, App Check), and optimizing user inputs by handling downscaling and aspect ratios.

A comprehensive guide for setting up and debugging the fundamental structure of a LÖVE (Love2D) game in Lua. Covers the essential callback loop (love.load, love.update, love.draw), delta-time movement, handling various input types, and managing screen states.

This guide details the modern, action-based approach to handling player input in Unity using the Input System package. It covers setting up Input Actions, Action Maps, utilizing the PlayerInput component, and advanced coding patterns (callbacks, polling). Use this when building robust, device-agnostic gameplay controls for modern Unity projects.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

A comprehensive guide and skill for building robust, production-ready REST API endpoints. This skill covers full lifecycle development, including input validation, centralized error handling, authentication/authorization checks, CRUD operations, pagination, and generating proper API documentation. It ensures that back-end services are secure, scalable, and adhere to industry best practices.

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

This Java SDK enables real-time bidirectional voice conversations with AI assistants using WebSocket technology. It supports authentication via API Key or DefaultAzureCredential, configuration for audio input/output (24kHz PCM), voice selection (OpenAI/Azure), and event handling for session management and function calling. Ideal for building voice-enabled applications.