Skill UI

This skill guides developers on building real-time, bidirectional, and multimodal streaming applications using the Gemini Live API. It covers low-latency voice, video, and text streaming over WebSockets, incorporating advanced features like Voice Activity Detection (VAD), function calling, and secure session management. Ideal for conversational AI, interactive video conferencing, and complex real-time user experiences.

Neon Functions provide long-running, stateful, serverless HTTP handlers deployed directly next to your Neon database branch. They are ideal for complex backend workloads that exceed traditional serverless limits, such as real-time WebSockets, Server-Sent Events (SSE) streaming, or sophisticated AI agents. Functions automatically inject the database connection URL and maintain state within the function scope, ensuring high performance and data proximity.

A comprehensive set of architectural patterns for building robust and maintainable HTTP servers using Kotlin Coroutines and the Ktor framework. It covers essential topics including REST routing DSL, plugin configuration (Authentication, CORS, StatusPages), Dependency Injection (Koin), serialization, WebSockets, and integration testing using testApplication.

A comprehensive, 10-phase methodology for authorized security assessment of modern APIs, including REST, GraphQL, WebSocket, and SOAP. This guide covers the entire testing lifecycle—from endpoint discovery and authentication bypass (JWT/OAuth 2.0) to sophisticated authorization flaws (BOLA/IDOR/BFLA), input validation, rate limiting, and CI/CD integration testing.

This specialized skill analyzes the complete lifecycle of real-time web communications, including WebSocket and Server-Sent Events (SSE). It is designed to map the initial handshake, decode complex message streams (subscriptions, keepalives, pushes, reconnects), and trace how frame activity leads to persistent or rendered state changes. Use this to isolate the minimal, decisive sequence of events that prove a system's behavior.

A comprehensive, multi-phase workflow guide for authorized reverse engineering of complex network protocols. Ideal for analyzing proprietary formats such as custom TCP/UDP binary protocols, Protobuf, gRPC, WebSocket frames, and reconstructing state machines from raw PCAP data. This guide covers data collection, field layout restoration, serialization recovery, and secure replaying.

A comprehensive guide to conducting authorized security assessments across API-driven applications. This skill covers REST, gRPC, and WebSocket protocols, addressing the full OWASP API Security Top 10 2023. Techniques include identifying Broken Object Level Authorization (BOLA/IDOR), broken authentication, excessive data exposure, and implementing fuzzing for various API endpoints. Designed for professional penetration testing engagements.

This abstraction provides a centralized mechanism for handling every incoming WebSocket message. Instead of directly subscribing to the service, handlers register themselves and are responsible for filtering the event payload based on a specific 'action'. This ensures components react only to the events they are interested in, promoting efficient and decoupled application architecture.

This guide details how to implement real-time notifications from a backend API to the Admin UI using WebSockets. It covers emitting messages from server-side logic (e.g., background tasks) and receiving/handling them within the Admin's WebSocket handler, allowing for immediate UI feedback like toasts or cache updates.

Generate comprehensive, developer-friendly API documentation from your codebase, including endpoints, parameters, request/response examples, authentication, error handling, and OpenAPI/Swagger specs for REST, GraphQL, and WebSocket APIs.

This skill provides a structured methodology for authorized security assessments of REST, GraphQL, WebSocket, and SOAP APIs. It covers discovery, authentication flaws (JWT/OAuth), authorization issues (BOLA/IDOR), rate-limit testing, and CI/CD integration. Includes 10-phase workflow from reconnaissance to reporting, utilizing tools like Entropy, Burp, and FireTail for comprehensive vulnerability identification.

Build real-time voice AI applications with the Azure AI Voice Live SDK for .NET, featuring bidirectional WebSocket communication, audio streaming, session events, and function calling.