Skill UI

This skill generates FastAPI router templates with authentication, response models, and HTTP status codes. It helps developers create standardized backend endpoints quickly by replacing placeholders for resource names and implementing security patterns.

Use fp-ts TaskEither to build clean async pipelines in TypeScript, wrap Promises and API requests, and replace nested try/catch error handling with practical examples.

Learn pragmatic fp-ts patterns for handling errors as values with Either and TaskEither, replacing try/catch spaghetti in TypeScript validation and domain logic.

Orchestrate comprehensive legacy system modernization using the strangler fig pattern. This workflow enables gradual replacement of outdated components while maintaining continuous business operations through expert agent coordination. It includes phases for legacy assessment, test coverage establishment, and incremental migration implementation to minimize disruption and maximize modernization velocity.

Automate end-to-end customer support workflows within Freshdesk. This skill allows users to manage the complete ticket lifecycle, including creating new cases, updating statuses, performing advanced searches, and adding public replies or private notes. It is designed for integrating sophisticated support operations into automated processes via Rube MCP.

This skill provides a specialized guide for migrating Godot 3.x projects to Godot 4, focusing on GDScript 2.0 syntax changes. It covers key updates like the new Tween system, export annotations, and signal connections. Use this when porting existing projects, encountering syntax errors after upgrading, or replacing deprecated nodes. It includes best practices for typed arrays, coroutines, and troubleshooting common migration issues to ensure a smooth transition.

This skill helps identify CAPTCHA bypass vulnerabilities in web applications by testing various patterns such as omitting the CAPTCHA field, sending empty values, replaying tokens, and testing alternate endpoints. It is intended for authorized security assessments only.

A security-testing methodology for hunting fintech-specific GraphQL flaws such as ledger desync, decimal rounding abuse, idempotency replay, source-account IDOR and KYC field authorization gaps. For authorized assessments only.

This skill identifies authentication flaws in password reset flows, including username enumeration, exposed reset tokens, token replay, and missing rate limits. It helps security professionals assess account recovery security risks and prevent unauthorized access.

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

Hunting methodology for OAuth vulnerabilities from 22 bug bounty reports, covering redirect_uri bypass, CSRF state, nonce replay, referrer leakage, and mobile deep link attacks for authorized security assessments.

Automate Intercom operations via Rube MCP (Composio): manage conversations, contacts, companies, segments, and admins. Search tools first for current schemas. Includes workflows for replies, assignments, and state management.