Skill UI

Showcases modern Python practices, covering strict 3.12 type hints, dataclasses vs Pydantic decisions, asyncio/httpx patterns, src-layout projects, pyproject tool configs, virtual env workflows, and pytest guidance for reliable codebases.

Automates feature delivery by reading specs, designing architecture, coding in src/, adding tests, and preparing handoff notes while following structured checklists.

Guides Python authors from commit to release with end-to-end steps for structuring src layouts, choosing setuptools/hatchling/flit/poetry backends, enforcing SOLID+type-hinting patterns, orchestrating lint/test/CI, managing PEP 440 semantics, and publishing trusted releases to PyPI.

This tool performs a comprehensive audit of website images to ensure optimal SEO and web performance. It checks for proper alt text descriptions, recommends modern formats (WebP, AVIF), validates file sizes, and verifies responsive image implementation using `srcset` and `sizes`. Furthermore, it guides best practices for lazy loading, prioritizing LCP images, and preventing Cumulative Layout Shift (CLS) by checking for dimensions.

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

This guide provides best practices for preparing code, data, and supporting artifacts for academic submissions, focusing on achieving reproducibility for peer review (especially in double-blind settings). It covers crucial steps including artifact anonymization, establishing clear data availability statements, structuring the repository (README, env, data, src), ensuring licensing compliance, and planning for permanent post-acceptance archiving.

Entry point for adding native device capabilities to Power Apps mobile apps—camera, image and document pickers, barcode/QR scanning, secure storage, file system, sharing, haptics, PDF generation and viewing, pen capture, and background GPS tracking—through typed wrappers under src/native/.

This internal skill assists in implementing pen input, signature, and handwriting capture workflows within Power Apps mobile applications. It verifies app structure, checks for the native pen input package, and generates or updates the native wrapper code in src/native/penInput.ts. It ensures compatibility with React Native APIs and handles user cancellation or module missing states correctly.

Internal implementation skill for camera, image picker, barcode scanner, and QR scanner workflows in Power Apps mobile applications. Generates typed camera wrappers and custom upload guidance for Dataverse image/file workflows. Only writes JS files under src/native/ without modifying package.json or installing modules.

A comprehensive, black-box workflow designed for professional bug bounty hunting and penetration testing. It guides users through a 5-stage methodology (Intake, Recon, Enum, Hunt, Report), covering 19+ advanced attack playbooks (e.g., RCE, SQLi, XSS, SSRF). The skill integrates real-world exploit cases, structured payloads, and WAF bypass techniques for maximizing vulnerability discovery in web applications and APIs.

A comprehensive five-phase methodology for bug bounty and SRC vulnerability hunting, covering intake, reconnaissance, enumeration, active hunting, and reporting. Includes attack playbooks for SQLi, XSS, RCE, SSRF, IDOR, and more, with WAF bypass techniques and prioritization strategies for efficient security assessments.