Skill UI

This tool automates the creation of production-ready End-to-End (E2E) tests using the Playwright framework. Users can provide natural language descriptions (like user stories, feature names, or component paths) to automatically generate comprehensive test suites. It follows best practices, including utilizing role-based locators, structuring tests with setup/act/assert phases, and generating supporting files like page objects and fixtures for maintainability.

This tool provides a comprehensive, file-by-file mechanism to migrate existing UI test suites from older frameworks like Cypress or Selenium to the modern Playwright framework. It automatically detects the source framework, maps key API functions (e.g., `cy.get` to `page.locator`), upgrades outdated locators to best practices (like `getByRole`), and manages the entire conversion process, ensuring high compatibility and minimizing manual effort. Ideal for teams modernizing their E2E testing infrastructure.

Production-grade toolkit that lets Claude Code agents scaffold Playwright configs, generate/review/fix end-to-end tests, migrate suites, sync with TestRail, and run BrowserStack reports.

Full Instagram Graph API integration for Business/Creator accounts, handling publishing, analytics, comments, DMs, hashtags, scheduling, templates, dashboards, and governance; suited for automating multi-format campaigns via scripts and APIs.

Offers testing guidance covering TDD workflows, unit/integration/E2E organization, framework support, mocking strategy, and coverage to help teams deliver reliable, well-structured test suites.

A comprehensive skill for generating multimodal media content using fal.ai models. It supports text-to-image (Nano Banana), text/image-to-video (Veo, Kling, Seedance), and text/video-to-audio (CSM-1B, ThinkSound). Use this tool for any creative project requiring high-quality generated images, videos, or sound effects.

Perform comprehensive security audits across AWS, Azure, and GCP by assessing infrastructure configurations against established CIS Foundations Benchmarks. This skill guides users through running automated scans using industry tools like Prowler and ScoutSuite, interpreting failed controls, identifying security gaps, and implementing systematic remediation to ensure continuous compliance and maintain a robust security posture.

This skill provides a structured framework for developing comprehensive communication templates for various malware incidents (e.g., ransomware, wipers, worms). It ensures that stakeholders—including C-suite executives, IT teams, customers, and regulators—receive appropriate, severity-based information at the correct time, maintaining transparency and aiding rapid incident response and compliance.

Guide for assessing AWS, Azure, and GCP environments with tools such as Pacu, ScoutSuite, and Prowler to uncover IAM weaknesses, exposed storage, insecure serverless functions, and cloud-native attack chains.

A comprehensive guide covering methodologies for conducting authorized penetration testing across major cloud platforms, including AWS, Azure, and GCP. It details the shared responsibility model, techniques for exploiting IAM misconfigurations, testing for SSRF vulnerabilities to cloud metadata services, and utilizing industry tools like Pacu and ScoutSuite. Findings are mapped to the MITRE ATT&CK Cloud matrix for robust reporting.

A comprehensive guide to implementing and validating Transport Layer Security (TLS) 1.3. This skill covers configuring modern cipher suites, key exchange groups, and enforcing perfect forward secrecy (PFS). Use this when deploying secure communication protocols, hardening network services, meeting compliance standards, or performing deep security assessments on web servers and applications.

This guide provides a comprehensive methodology for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications and APIs. It teaches testers how to systematically manipulate object identifiers (such as numerical IDs, UUIDs, or slugs) within API requests and URLs. Techniques involve using advanced tools like Burp Suite's Authorize extension to test object-level access control, validating both horizontal (same privilege) and vertical (different privilege) access restrictions during authorized penetration tests or bug bounty engagements.