Skill UI

Provides a robust, iterative development workflow for automating Apple Notes using JXA (JavaScript for AppleScript). This setup includes file-watching hot-reloading for rapid testing and helper functions to simulate note CRUD operations, significantly speeding up the development process.

This guide provides a comprehensive workflow for deploying Algolia-powered search applications to various cloud platforms, including Vercel, Fly.io, and Google Cloud Run. It covers best practices for API key separation (Admin vs. Search-Only), setting up environment variables, and implementing both backend API routes and advanced frontend components using React InstantSearch or vanilla JavaScript.

This guide details how to automate Apple Notes on macOS, providing a solution for applications lacking a direct REST API. It offers comprehensive instructions on setting up necessary system accessibility permissions and utilizing advanced scripting technologies, including AppleScript, JavaScript for Automation (JXA), and Shortcuts. Use cases cover advanced note management, batch processing, and integrating Notes into larger automation workflows.

This guide provides techniques to optimize Grammarly API interactions, focusing on reducing latency and improving throughput. Learn how to implement efficient caching strategies (like LRU cache) for repeated score checks and how to execute multiple API calls in parallel using Promise.all. Use this when experiencing slow response times or needing cost/performance improvements in Grammarly integrations.

This skill provides a comprehensive guide for developers on performing fundamental blockchain queries using QuickNode's RPC infrastructure. It demonstrates how to retrieve the current block number, check ETH balances for specific addresses, read data from ERC-20 smart contracts, and fetch transaction receipts. It is essential for initial Web3 integration and blockchain development projects using JavaScript/TypeScript.

This skill guides you through writing, debugging, and optimizing Adobe Illustrator automation scripts using ExtendScript (JavaScript/JSX). Learn to manipulate the entire Illustrator DOM—including documents, layers, paths, text frames, and artboards—to automate complex design workflows, perform data-driven batch processing, and export assets to various formats, significantly enhancing creative efficiency.

Generates a single, self-contained animated slide designed for educational or historical explainers. Utilizing CSS keyframes, this skill creates a retro, 8-bit, or pixel-art aesthetic, complete with animated mascots, kinetic typography, and timeline ribbons. Ideal for marketing campaigns, product history reveals, or any content requiring a nostalgic, video-like feel without external JavaScript.

A powerful utility that converts Markdown (`.md`) files into richly formatted Word (`.docx`) documents. Built using pure JavaScript, it requires no external dependencies like Pandoc or LibreOffice. Features include automatic generation of title pages (from YAML front-matter), dynamic table of contents, and accurate embedding of PNG images, making it ideal for technical documentation and reports.

A powerful technique used when full XSS is blocked by CSP, sanitizers, or WAFs, but HTML injection is possible. It leverages unclosed HTML tags (like <img> or <link>) to capture and exfiltrate sensitive page data (CSRF tokens, session IDs, form values) by forcing the browser to include the subsequent content in a request URL.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

This skill automatically generates comprehensive unit tests based on provided source code. It supports multiple programming languages (Python, JavaScript, Java, Go, Rust) and popular testing frameworks (pytest, Jest, JUnit). Use it to improve code coverage, test boundary conditions, and validate error handling efficiently, saving manual testing time.