Skill UI

This module provides essential architectural abstractions for structuring complex applications using the Webiny framework. It defines core types for various system components, including Admin panels, APIs, Command Line Interfaces (CLI), Infrastructure management, and Project logic. Developers must utilize these imported abstractions to ensure strict type safety and clear separation of concerns in their code.

Provides a standardized and robust skeleton for developing full-stack extensions that integrate both a backend API service and a frontend Admin UI. This pattern enforces clear separation of concerns, utilizing shared domain layers for data consistency while ensuring that API and Admin code are correctly registered using specific entry points. Ideal for complex applications requiring unified management interfaces and robust backend logic.

This catalog provides comprehensive infrastructure abstractions and hooks for the Webiny ecosystem. It includes standardized lifecycle hooks (Before/After Build/Deploy/Watch) and specialized services (Logger, UI, AWS interactions) for various modules (Admin, API, Core). Use these standardized interfaces to seamlessly integrate custom logic into your build and deployment pipelines, ensuring modularity and consistency.

A comprehensive guide for developers on deploying, developing locally, and managing environments for Webiny serverless platform on AWS. Learn how to use `yarn webiny deploy` for multi-environment releases (dev, staging, prod), and how to leverage `yarn webiny watch` for local API (Lambda stubs) and Admin (React HMR) development, ensuring full-stack debugging capabilities.

This guide details the complete architecture and organizational principles of a Webiny project. It covers the core concepts of the flat folder structure, the role of the central `webiny.config.tsx` file, and how to register various types of extensions (API, Admin UI, Infrastructure, and CLI Commands) using declarative JSX components. Use this when developers need to understand where custom code belongs and how to integrate different functional components into the platform.

Generates a complete, self-contained HTML dashboard for analytics, admin, or control panel views. It structures the layout with a fixed sidebar, top navigation, KPI cards, and detailed charts (using inline SVG). Ideal when the brief requires visualizing key metrics, performance over time, or operational statistics.

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

This module provides essential abstractions for managing language data within the admin panel. It includes `LanguageDto` for strongly typed data structures and `useLanguages` hook for fetching and handling language-related state and logic. Use this when developing administrative features that require language catalog management.

The Form Model system provides a comprehensive, declarative way to build complex user forms. It supports defining various field types (Text, Number, DateTime, File, Object, etc.) using a fluent builder API. Developers can control layout, apply advanced validation (Zod), implement conditional visibility/disability rules, and handle complex data structures like nested objects and dynamic zones, making it ideal for building advanced admin interfaces.

This is a comprehensive lookup reference for the Mercury MCP server tools. It guides AI agents on how to interact with a virtual team workspace, enabling structured communication for messaging teammates, managing threads and tasks, scheduling complex automations, and performing administrative graph edits. Use this when your agent needs to execute specific team workflows.

A comprehensive guide to achieving compliance with the HIPAA Security Rule (45 CFR Part 164). This skill outlines the mandatory steps to protect electronic Protected Health Information (ePHI), including conducting thorough risk analyses, deploying administrative, physical, and technical safeguards, managing Business Associate Agreements (BAAs), and preparing for breach notifications and OCR audits. Essential for Covered Entities and Business Associates.

This toolkit provides comprehensive offensive and administrative capabilities for Microsoft Entra ID, Azure AD, and AD FS. It allows authorized penetration testers to perform unauthenticated reconnaissance, acquire various access tokens, and critically, test for federation backdoors (Golden SAML). It is essential for validating identity-attack resilience and producing detailed hardening recommendations during red-team engagements.