Skill UI

A comprehensive guide detailing Next.js 16+ usage with Turbopack. Turbopack, written in Rust, is an incremental bundler designed to drastically speed up development startup and Hot Module Replacement (HMR) by utilizing file system caching. This document guides developers on best practices, differentiating between the default Turbopack usage and when to revert to Webpack for debugging or compatibility.

This tool provides a structured methodology for triaging web application security findings generated by DAST and SAST scanners (e.g., Burp Suite, ZAP). It validates true positives, dismisses false positives, and assigns risk ratings using the OWASP Risk Rating Methodology (Risk = Likelihood x Impact). Use it to reduce alert fatigue and prioritize remediation efforts for development teams, ensuring focus on the most critical vulnerabilities.

This comprehensive guide covers the principles and implementation steps for building Progressive Web Apps (PWAs). Learn to integrate essential components like Web App Manifests and Service Workers to ensure your web application offers a reliable, fast, and truly offline-capable experience, mimicking the feel of a native mobile app. Ideal for enhancing web resilience and installability.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.

A comprehensive tool for establishing performance baselines across multiple dimensions. It measures Core Web Vitals (LCP, CLS, INP), API latency (p50, p95, p99), and development build efficiency. Essential for detecting performance regressions before merging code, ensuring stability in CI/CD pipelines, and comparing alternative stack implementations.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

This guide addresses the critical difference between standard Node.js SHA3-256 and the Keccak-256 hash function required by Ethereum. Using the wrong hash function can silently corrupt calculated function selectors, event topics, storage slots, and derived addresses. It provides best practices and code examples for using dedicated libraries (like ethers, viem, web3.js) to ensure correct, Ethereum-compliant hashing in JavaScript and TypeScript environments.

This skill helps discover and install capabilities from the open agent skills ecosystem. When users ask for help with tasks like web development, testing, or deployment, this skill searches the marketplace, verifies quality based on install counts and reputation, and installs skills into Cherry's managed library with proper security warnings before installation.

Security-first development practices for web applications. Covers threat modeling with STRIDE, OWASP Top Ten defenses, input validation, parameterized queries, authentication and session hardening, security headers, dependency auditing, and supply-chain risk assessment.

A comprehensive skill guide for building complex, feature-rich web games and game engines using modern web technologies like HTML5, Canvas, WebGL, and JavaScript. Covers full 2D and 3D game development workflows, including implementing the game loop, physics simulation (collision detection, Newtonian physics), handling diverse input methods (touch, gamepad), managing assets, and integrating multiplayer features via WebRTC. Ideal for creating everything from simple platformers to advanced 3D simulations.

A general-purpose skill for writing and executing end-to-end (E2E) browser automation tests using Playwright. It handles complex scenarios such as login flows, form submission, responsive viewport testing, and checking for broken links. The skill automatically detects local development servers and executes custom scripts in a safe, temporary directory, providing real-time debugging and results visualization.

Leverage AI-powered exploratory testing to thoroughly audit web applications and verify functionality. This skill simulates user interaction, detecting complex bugs, validating critical flows (like checkout or login), and checking accessibility compliance. Use it proactively after development to ensure quality before deployment.