Skill UI

This skill analyzes a live website or application to understand its underlying business model, data collection practices, and user interactions. It then generates a comprehensive, 16-section Terms of Service document, automatically incorporating provisions for GDPR, CCPA, and other major compliance frameworks. Ideal for launching new SaaS, e-commerce, or mobile products.

XcodeBuildMCP is a unified skill set designed to streamline the entire mobile and desktop development lifecycle. It replaces raw command-line tools like xcodebuild, xcrun, and simctl, providing structured workflows for iOS, macOS, watchOS, tvOS, and visionOS. Capabilities include project discovery, managing simulator and physical device workflows, advanced UI automation (gestures, view inspection), robust logging, and deep debugging using LLDB. It simplifies complex build, test, and run operations across multiple platforms.

Generate a high-fidelity, multi-screen mobile prototype simulating a gamified experience, perfect for habit trackers, life management apps, or RPG concepts. The output features three distinct phone frames: cover/value proposition, daily quests dashboard, and detailed quest view, all presented on a single dark showcase stage. Ideal for visualizing user journeys and engagement mechanics.

Create a single mobile app screen mockup framed in a realistic iPhone 15 Pro device. Use it for app UI concepts, phone screen previews, and prototype presentations.

Generate a comprehensive, multi-screen mobile onboarding prototype displayed in a side-by-side HTML format. This tool is perfect for designing the initial user experience (UX) flow, covering splash screens, value proposition details, and final sign-in steps. Ideal for apps needing a polished debut experience.

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

This guide provides expert principles and strategies for optimizing the entire user onboarding journey, from initial signup to achieving the 'Aha Moment.' It covers core CRO principles (Time-to-Value, One Goal Per Session), designing effective checklists, utilizing empty states, coordinating multi-channel communication (email/in-app), and defining key activation metrics. Use this when aiming to boost user retention and improve the first-run experience across SaaS, B2B, and mobile applications.

A comprehensive guide for optimizing the entire user signup, registration, and account creation journey. This resource covers core CRO principles, such as minimizing required fields, reducing perceived effort, and improving UX for various forms (email, password, social auth). It provides strategies for single-step versus multi-step flows, mobile optimization, and handling post-submit experiences to maximize conversion rates across B2B and B2C products.