Skill UI

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

Explains how to create route.ts endpoints in the Next.js App Router, covering HTTP methods, request/response handling, streaming, cookies, redirects, CORS, and caching so you can build REST APIs.

Guides building Next.js Server Actions for App Router forms, mutations, and optimistic updates, covering useFormState/useFormStatus hooks, revalidation helpers, and post-submission redirects.

This skill guides users through analyzing suspicious URLs using the URLScan.io platform or API. It provides a safe environment to capture screenshots, DOM content, network traffic, and analyze JavaScript behavior to investigate phishing attempts, credential harvesting, and sophisticated malicious redirects without risking the analyst's system.

A comprehensive security tool designed to assess the resilience of OAuth 2.0 and OpenID Connect (OIDC) implementations. It probes for critical misconfigurations and security flaws, including authorization code interception, redirect URI manipulation (open redirects), CSRF vulnerabilities, scope escalation, token leakage, and PKCE bypass. Essential for penetration testing of Single Sign-On (SSO) systems and API security.

This skill provides the comprehensive workflow for interacting with the Anthropic Messages API. It covers advanced features including streaming responses, multimodal vision input, generating structured JSON output using system prompts, and managing multi-turn conversations. It redirects users to the current, primary guide for all Claude API patterns.

A comprehensive guide and workflow for deploying static websites (e.g., Vue, React, Angular, Hugo, Jekyll) from a local environment to a production server using VSCode SFTP. This skill covers setting up secure SFTP connections, generating production-ready Nginx configurations (including security headers, caching, and HTTPS redirects), and providing a complete deployment checklist for smooth CI/CD-like workflows.

This comprehensive API catalog provides a set of abstractions, including Use Cases and Event Handlers, for managing the core components of a website builder. It enables developers to perform essential operations such as creating, retrieving, updating, and deleting pages, managing page revisions, and handling URL redirects. It serves as the foundational layer for building structured web application logic.

This skill performs an adversarial audit of web application authentication flows. It systematically probes for critical security vulnerabilities such as missing CSRF protection, insecure session cookies (lacking Secure/HttpOnly flags), risky cross-origin redirects, and OAuth misconfigurations. It generates a structured report detailing findings and severity levels, making it ideal for pre-deployment security audits and regression testing.

A comprehensive tool for managing all URL redirects (301/302) across a website. Use it to create permanent or temporary redirects, systematically audit existing rules for common SEO issues like redirect chains, loops, and broken links, and fix these issues. Essential for site migrations, URL restructuring, and maintaining high SEO performance by preventing traffic loss.

This tool executes comprehensive SEO implementation changes directly on connected CMS platforms like WordPress and Webflow. It facilitates the deployment of structured data (JSON-LD schema), updating meta tags, managing canonical URLs, creating 301/302 redirects, and requesting indexation. The process enforces a mandatory approval gate to ensure auditability and a structured implementation report for every change, bridging the gap between SEO recommendations and live deployment.

This skill performs a deep technical SEO analysis, diagnosing fundamental website issues related to search engine visibility and performance. It covers optimizing Core Web Vitals, improving crawlability via robots.txt and sitemaps, fixing rendering problems (JavaScript SEO), managing complex redirects, and ensuring optimal site architecture. Use it for comprehensive site audits, migrations, and performance tuning.