Skill UI

A comprehensive guide and framework for assessing real-time WebSocket APIs (ws:// or wss://). This skill covers critical security checks, including Cross-Site WebSocket Hijacking (CSWSH), authentication bypass, message injection attacks, input validation flaws, and denial-of-service (DoS) via message flooding. It utilizes tools like Burp Suite and Python for simulating malicious payloads and ensuring secure real-time communication channels.

Astro is a modern web framework designed specifically for building high-performance, content-heavy websites like blogs, documentation sites, and portfolios. Its core innovation is the Islands Architecture, which ships zero JavaScript by default, drastically improving performance and Core Web Vitals. It supports multi-framework components (React, Vue, Svelte) in a single project, making it ideal for content developers prioritizing speed and flexibility.

Hono is a minimal and ultrafast web framework built entirely on Web Standards (Request/Response/fetch). It allows developers to build high-performance APIs and full-stack applications that run seamlessly across multiple environments, including Cloudflare Workers, Deno, Bun, and Node.js. It is ideal for edge deployment, Backend for Frontend (BFF) layers, and type-safe backend services.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

This skill guides the use of Patrol for writing robust End-to-End (E2E) and integration tests in Flutter. It is essential for validating complex user flows, interactions with native APIs (like permissions or deep links), and ensuring cross-platform consistency across Android, iOS, and Web. It helps capture UI regressions and validates the entire application state.

This comprehensive guide covers the full lifecycle of Apify Actors, enabling deployment from local environments to production platforms. Learn to trigger scraping tasks via APIs (e.g., Next.js routes), consume structured data, and handle results asynchronously using webhooks in frameworks like Express.js. Ideal for building robust, data-driven web services and automating data pipelines.

This expert skill converts static or modern frameworks (React, Next.js, HTML) into fully dynamic, pixel-perfect, and SEO-optimized WordPress themes. It functions as a senior architect, ensuring absolute fidelity to the source while integrating core WordPress functionalities like ACF, custom hooks, and technical SEO best practices. Ideal for large-scale website migrations.

This skill performs comprehensive regulatory gap analysis across major compliance frameworks, including GDPR, CCPA, ADA, PCI-DSS, and CAN-SPAM. It analyzes live websites and codebases to produce a detailed compliance scorecard, identifies specific non-compliant gaps, and generates a prioritized remediation roadmap with effort estimates. Essential for businesses ensuring legal adherence across multiple global jurisdictions.

This skill provides a comprehensive framework for setting up and managing real-time webhooks from the Navan platform. It covers registering callback URLs, verifying payload signatures using HMAC-SHA256, and implementing idempotent event processing. It routes and handles key events related to the booking lifecycle, expense workflow, and travel disruptions, enabling seamless integration with internal systems.

This comprehensive skill provides a robust framework for receiving and processing SalesLoft webhooks in real-time. It includes critical logic for HMAC-SHA256 signature verification and replay protection. The system efficiently routes various sales events (e.g., email opened, call completed, person updated) to sync data with external CRMs or operational systems, while ensuring data integrity through idempotency checks using Redis.

A comprehensive guide to implementing a production-ready Shopify app architecture using the Remix framework. This template covers ideal project structure, integrating Prisma for robust session storage, and implementing official Shopify patterns like Theme App Extensions and webhooks. Use this when starting a new e-commerce SaaS application on Shopify.