Skill UI

Extract backend API routes from SPA JavaScript bundles to identify missing authentication or broken access control vulnerabilities. Test endpoints without credentials to find unauthenticated data exposure and security gaps in web applications.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

A comprehensive guide to implementing isometric design in web and mobile applications, including CSS, SwiftUI, Flutter, and React Native code examples.

A skill for reverse engineering front-end web applications. It helps locate API signature chains, analyze encrypted request parameters, sample runtime behavior, and reproduce logic locally in Node.js for evidence-based output. Suitable for security assessments and understanding client-side encryption.

Build enterprise agents for Microsoft 365, Teams, and Copilot Studio with the Microsoft 365 Agents SDK in TypeScript/Node.js. Covers Express hosting, AgentApplication routing, streaming responses with Azure OpenAI, invoke activities, and Copilot Studio client and WebChat integration.

Provides comprehensive guidance for packaging and deploying Makepad applications across all supported platforms, including desktop installers (deb, nsis, dmg), mobile APK/IPA builds, WebAssembly output, and CI/CD automation with GitHub Actions.

This skill specializes in secure mobile application development, focusing on input validation, WebView security, and mobile-specific security patterns. It covers secure data storage, authentication implementation, and platform-specific vulnerabilities for iOS and Android. Ideal for building security-first mobile apps that protect sensitive data against common attack vectors like injection and man-in-the-middle attacks.

This comprehensive guide covers advanced topics in modern JavaScript (ES6+), focusing on functional programming patterns and industry best practices. It is ideal for developers looking to refactor legacy code, optimize performance, manage asynchronous operations (Promises/async-await), and build highly maintainable, scalable web applications.

This skill helps developers create custom external web service APIs for Moodle LMS. It covers following Moodle's API framework and coding standards, enabling integration with external applications, mobile backends, and course management systems using PHP.

Master Next.js App Router development with guidelines on Server Components, data fetching strategies, routing patterns, and performance optimization. Learn to structure projects, handle API routes, and implement caching effectively for scalable web applications.

This guide provides expert patterns for implementing secure, full-stack authentication in Next.js using Supabase. It covers essential architectural components, including setting up separate browser and server clients, utilizing middleware for route protection and session refreshing, handling OAuth callbacks, and implementing auth operations safely via Server Actions and Server Components. Essential knowledge for building secure, modern web applications.

This skill provides comprehensive guidance for building scalable, maintainable, and production-ready backend applications using Node.js. It covers modern architectural patterns, best practices, and implementation details for REST APIs, GraphQL servers, microservices, authentication, real-time WebSockets, and complex database integrations (SQL/NoSQL).