Skill UI

This specialized guide is essential for developers migrating projects from Godot 3.x to Godot 4. It systematically covers major technical updates, including GDScript 2.0 syntax changes, mandatory `@export` annotations, adopting the modern `create_tween()` system, and updating signal connections and coroutine handling from `yield` to `await`. Use this resource to ensure a smooth and efficient engine upgrade.

This skill creates or updates a shared Apple design context document for other HIG skills. It auto-discovers project details from code and assets, then gathers information on product overview, platforms, technology stack, design system, accessibility, and user context. The output is a structured markdown file used to tailor subsequent design guidance.

This comprehensive guide outlines Apple's Human Interface Guidelines (HIG) for various technologies and user flows (e.g., Siri, Apple Pay, HealthKit, ARKit, Generative AI). It teaches developers how to ensure their applications feel natively integrated, respect user privacy, and adhere to established platform patterns across iOS, macOS, and other Apple devices. Essential reading for building high-quality, compliant, and seamless user experiences.

This comprehensive guide outlines the principles and technical implementation for creating highly accessible, high-contrast user interfaces. It ensures WCAG AAA compliance by specifying pure black/white color pairings, clear boundaries, and legible typography across web (CSS), iOS (SwiftUI), and Android (Flutter) platforms. Ideal for applications requiring maximum legibility and stark visual impact.

A comprehensive guide for implementing holographic user interfaces across web and mobile platforms. It teaches core principles like zero opacity backgrounds, scanlines, and luminous edges, simulating projected light displays. Ideal for designing futuristic, sci-fi, or high-tech application interfaces.

Techniques for hunting ASP.NET-specific attack surfaces, including ViewState deserialization, Telerik, WCF, and SharePoint. Requires explicit authorization and mandates a confirmation gate before any probing.

Security skill for detecting missing or weak rate limiting on authentication endpoints. Identifies brute force vulnerabilities in OTP, password reset, and login systems. Requires explicit authorization for authorized security assessments only. Includes shadow-throttle detection and enumeration techniques.

This skill identifies security vulnerabilities in CI/CD pipelines, focusing on Jenkins Script Console, GitHub Actions workflows, and self-hosted runners. It covers techniques like Pwnrequest injection, credential store dumping, and Terraform state leakage. Requires explicit authorization for offensive security assessments.

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.

A skill for hunting CSRF vulnerabilities in web applications. Covers raw HTTP client techniques, token bypass methods, and high-value target identification, with an emphasis on authorized testing.

This skill acts as a loader for the /hunt orchestrator, facilitating authorized security assessments. It enforces strict scope boundaries and requires explicit written authorization before execution. The tool includes baseline checks to avoid false positives and fingerprinting capabilities to identify technology stacks like Next.js or cloud providers. It focuses on generating reproducible findings for remediation rather than exploitation.

Technique for authorized bug-bounty and penetration-testing engagements that hunts mishandled exceptional conditions in web apps, inducing unhandled exceptions with wrong-type, malformed, or boundary inputs to detect verbose stack traces, ORM internals, server paths, and framework version leaks.