Skill UI

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

A comprehensive guide to implementing robust user authentication flows using Clerk. Learn to set up sign-up and sign-in pages, integrate OAuth social logins (Google, GitHub, Apple), and customize the UI entirely. This guide covers both quick pre-built component usage and advanced custom form implementation with full error handling and MFA support, ideal for building modern SaaS applications.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Generates end-to-end tests for web workflows using Playwright, Cypress, or Selenium, automating browser steps and assertions so QA teams can validate registration, login, shopping cart, and other multi-step flows across browsers and devices.

Provides Playwright-powered browser automation that detects dev servers, writes tests to /tmp, launches a visible Chromium, and exercises login flows, responsive layouts, form submissions, link checks, or any browser task to validate web functionality.

This skill guides developers through installing the Vercel Command Line Interface (CLI) and configuring secure authentication. It covers multiple setup scenarios, including interactive OAuth login, setting environment tokens for CI/CD pipelines, and linking a local project directory to a specific Vercel project. Essential for initial project setup and ensuring smooth deployments.

Analyzes test coverage gaps by cataloging routes, components, APIs, and existing specs, then builds a coverage matrix, prioritizes missing areas, and recommends follow-up plans or auto-generation for missing tests.

This skill provides structured methods for detecting credential stuffing attacks by analyzing authentication logs. It focuses on identifying complex patterns such as login velocity anomalies, high IP diversity, password spray techniques, and suspicious geographical distributions of failed logins. It is essential for SOC analysts conducting threat hunting or building robust detection rules against account takeover attempts.

A general-purpose skill for writing and executing end-to-end (E2E) browser automation tests using Playwright. It handles complex scenarios such as login flows, form submission, responsive viewport testing, and checking for broken links. The skill automatically detects local development servers and executes custom scripts in a safe, temporary directory, providing real-time debugging and results visualization.

Leverage AI-powered exploratory testing to thoroughly audit web applications and verify functionality. This skill simulates user interaction, detecting complex bugs, validating critical flows (like checkout or login), and checking accessibility compliance. Use it proactively after development to ensure quality before deployment.

This skill automates the entire process of creating and integrating a DingTalk application and binding a QwenPaw bot. It utilizes a headed browser mode and manages complex user flows, including pausing for manual login confirmation and ensuring all configuration changes are properly published. It supports customizing app details, uploading required images, and setting up the bot capability, making the setup process seamless and robust.