Skill UI

Step-by-step workflow for pentesters to detect and exploit NoSQL injection in MongoDB, CouchDB, and similar stacks, covering operator abuse, authentication bypass, blind data extraction, JavaScript injection, and automation with NoSQLMap.

A step-by-step playbook for spotting and abusing JavaScript prototype pollution in both browsers and Node.js services to trigger DOM XSS, remote code execution, and authorization bypasses during security hunts and code reviews.

Performs comprehensive API discovery across an organization using passive traffic analysis, active scanning, DNS enumeration, JavaScript scraping, and cloud inventory to catalog documented, shadow, zombie, and deprecated endpoints for security assessments.

A comprehensive skill for identifying and exploiting Cross-Site Scripting (XSS) vulnerabilities in web applications. It systematically tests reflected, stored, and DOM-based contexts by injecting various JavaScript payloads. The process involves mapping all user input points, identifying output contexts (HTML body, attribute, JS string, etc.), and crafting payloads to bypass sanitization and Content Security Policy (CSP) protections, simulating real-world attacks like session hijacking and credential theft.

Astro is a modern web framework designed specifically for building high-performance, content-heavy websites like blogs, documentation sites, and portfolios. Its core innovation is the Islands Architecture, which ships zero JavaScript by default, drastically improving performance and Core Web Vitals. It supports multi-framework components (React, Vue, Svelte) in a single project, making it ideal for content developers prioritizing speed and flexibility.

Run Hugging Face models directly in JavaScript/TypeScript for text, vision, and speech tasks without backend servers, using Transformers.js in Node.js or modern browsers with WebGPU, quantization, and pipeline abstractions for efficient inference.

Controls BrowserWing-based browsers via HTTP endpoints to navigate pages, interact with elements (click/type/select), capture accessibility snapshots, run JavaScript, take screenshots, and execute batch sequences for data extraction workflows.

This skill provides a comprehensive workflow to transform raw data into professional visual charts. It intelligently analyzes data features (e.g., trends, comparisons, flows) to select the optimal chart type (line, bar, pie, etc.). Users provide data and specifications, and the skill generates a high-quality, detailed chart image using a structured JavaScript process.

A comprehensive skill guide for building complex, feature-rich web games and game engines using modern web technologies like HTML5, Canvas, WebGL, and JavaScript. Covers full 2D and 3D game development workflows, including implementing the game loop, physics simulation (collision detection, Newtonian physics), handling diverse input methods (touch, gamepad), managing assets, and integrating multiplayer features via WebRTC. Ideal for creating everything from simple platformers to advanced 3D simulations.

This comprehensive guide outlines best practices for writing robust JavaScript and TypeScript unit tests using the Jest framework. It covers essential topics including proper test structure, effective dependency mocking strategies (using jest.mock and jest.spyOn), handling asynchronous code, implementing snapshot testing, and modern techniques for testing React components with React Testing Library. It also provides a detailed reference of common Jest matchers.

Generates customizable prompts to scan a codebase, identify high-quality exemplars, and document patterns across languages (.NET, Java, JavaScript, TypeScript, React, Angular, Python) with configurable depth, categorization, and documentation formats.

A comprehensive skill guide for building production-grade, scroll-driven motion animations. It covers advanced techniques like parallax effects, sticky sections, horizontal scrolling, and staggered reveals using both the GSAP ScrollTrigger API and Framer Motion hooks. Ideal for implementing complex, performant animations in vanilla JavaScript, React, and Next.js.