Skill UI

Controls headful browsers via a CLI that runs sandboxed JavaScript, keeping page state persistent while navigating, form-filling, screenshots, scraping, or web testing flows.

A comprehensive, end-to-end workflow bundle guiding developers through the entire software development lifecycle. It covers project scaffolding, frontend development (React/Next.js), robust backend architecture, database design, rigorous testing (TDD, E2E), code quality review, and modern CI/CD deployment practices for web and mobile applications.

This comprehensive guide offers patterns and best practices for building robust, maintainable, and fast End-to-End (E2E) test suites using Playwright. It details essential concepts like Page Object Model (POM), advanced configuration, handling flaky tests, artifact management, and seamless integration into CI/CD pipelines. Essential for QA engineers and developers building web automation frameworks.

A comprehensive expert resource for building high-performance, async-first APIs using FastAPI, SQLAlchemy 2.0, and Pydantic V2. Covers advanced topics like microservices architecture, WebSockets, advanced security (OAuth2, RBAC), robust testing strategies (pytest), performance optimization, and modern DevOps practices (Docker, Kubernetes). Ideal for mastering scalable, production-ready Python web services.

This skill provides structured guidance and patterns for performing comprehensive web fuzzing using the powerful command-line tool, ffuf. Web fuzzing is an essential security testing technique used by penetration testers to discover hidden directories, unlinked endpoints, or sensitive files on a web server by systematically brute-forcing potential paths and parameters. Use this skill when you need to audit the security posture of a web application or map out unknown parts of a website.

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

This skill provides advanced methods for load testing and scaling web scraping pipelines using Firecrawl. It manages rate limits and optimizes throughput by implementing concurrency control, batch processing, and queue-based request throttling. Essential for capacity planning, stress-testing scraping performance, or maximizing data ingestion efficiency across various service plans.

This comprehensive guide details how to set up a robust, local development environment for Firecrawl integrations. It utilizes self-hosted Docker containers and Redis to eliminate reliance on paid API credits during development. The setup supports both unit testing (with mocked SDK) and full integration testing against the local instance, ensuring a seamless and efficient workflow for scraping and web data extraction projects.

Comprehensive Go guidance for browser automation and web scraping using Rod’s direct Chrome DevTools Protocol integration plus stealth anti-detection patterns, ideal for headless SPA testing, concurrent scraping, and request interception.

Map web inputs for reflected or stored HTML injection, send crafted tags via URLs, POST bodies, or visible fields, and document appearance/phishing manipulations for authorized security assessments.

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.