Skill UI

This skill is designed for assessing the security of Android inter-process communication (IPC) by systematically testing intents, broadcast receivers, content providers, and exported components. It helps identify critical vulnerabilities such as intent injection, unauthorized data leakage, and component hijacking, which are crucial during mobile penetration testing and security audits.

Comprehensive guide for implementing Firebase Cloud Messaging (FCM) in Flutter applications. Learn how to set up push notifications across iOS, Android, and Web, manage permissions, handle incoming messages in foreground, background, and terminated states, and properly manage FCM token lifecycles.

This skill guides the use of Patrol for writing robust End-to-End (E2E) and integration tests in Flutter. It is essential for validating complex user flows, interactions with native APIs (like permissions or deep links), and ensuring cross-platform consistency across Android, iOS, and Web. It helps capture UI regressions and validates the entire application state.

This skill guides the design, implementation, and auditing of inclusive digital products based on WCAG 2.2 standards. It covers the POUR principles and provides technical guidance for generating semantic ARIA (Web) and native accessibility traits (iOS/Android). Use it when defining UI components, auditing compliance gaps, or ensuring robust keyboard navigation and focus management.

An elite skill dedicated to generating premium, app-native, and highly readable UI/UX concept images. It visualizes entire application flows—from onboarding and authentication to complex dashboards—for iOS, Android, and cross-platform products. The focus is on creating believable, highly intentional designs with strong consistency, controlled color palettes, and clean hierarchies, avoiding generic, default-style mockups.

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

A comprehensive guide covering production-grade Android and cross-platform app development. It details best practices for selecting technology stacks (Kotlin, Flutter, React Native, KMM) and implementing modern architectures like Clean Architecture and MVI/MVVM across various platforms.

A comprehensive tool for managing the entire Android development lifecycle from the terminal. It allows users to create new projects, manage SDK packages, interact with emulators and physical devices, run detailed tests, inspect UI layouts, and search official Android documentation via CLI commands. Essential for professional Android developers.

Runs a comprehensive, systematic QA check on Figma designs to ensure they are production-ready before handing off to engineering. The checklist rigorously evaluates file hygiene, component consistency, accessibility (WCAG AA), content completeness, and overall readiness across multiple platforms (iOS/Android/Web). Use this skill when needing to validate a design’s quality and structure to prevent costly development rework.