Skill UI

A comprehensive guide for performing systematic security assessments on web applications. Following the OWASP Web Security Testing Guide (WSTG), this process identifies critical vulnerabilities such as broken authentication, authorization flaws (IDOR), SQL injection, and Cross-Site Scripting (XSS). The workflow covers reconnaissance, mapping, and advanced testing techniques using tools like Burp Suite and sqlmap, ensuring deep coverage beyond automated scanner capabilities. Ideal for pre-production security validation and compliance audits.

Nikto is a powerful open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests against over 7,000 potentially dangerous files, checks for outdated server software (over 1,250 versions), and identifies common vulnerabilities including XSS, SQL injection, misconfigurations, and weak SSL/TLS settings. It is essential for penetration testing and rigorous security auditing.

A comprehensive guide for assessing the security of JSON Web Token (JWT) implementations. This toolkit details attacks against cryptographic weaknesses, including algorithm confusion (e.g., RS256 to HS256), 'none' attacks, brute-forcing HMAC secrets, and claim manipulation. Ideal for penetration testing and security audits of modern APIs and SSO systems.

Automates comprehensive end-to-end Quality Assurance (QA) for deployed web applications. This skill performs multi-stage testing, including smoke tests, complex user interactions (forms, authentication), visual regression checks across breakpoints, performance monitoring (Core Web Vitals), and WCAG accessibility audits.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

Upgrades existing websites and apps to premium quality by auditing typography, color, layout, and UI patterns, then applying targeted tweaks within the current stack without rewrites.

Leverage AI-powered exploratory testing to thoroughly audit web applications and verify functionality. This skill simulates user interaction, detecting complex bugs, validating critical flows (like checkout or login), and checking accessibility compliance. Use it proactively after development to ensure quality before deployment.

Audits crawlability, metadata, structured data, Core Web Vitals, and content signals while planning keyword mapping, internal linking, and sitemap fixes so teams can steadily boost organic visibility.

A comprehensive tool for validating, generating, and auditing hreflang tags for multilingual and multi-regional websites. It checks critical SEO requirements, including self-referencing tags, bidirectional return links, proper x-default implementation, and adherence to ISO language/region codes. Use this when optimizing content for global audiences or ensuring Google correctly indexes all language versions.

This tool performs a comprehensive audit of website images to ensure optimal SEO and web performance. It checks for proper alt text descriptions, recommends modern formats (WebP, AVIF), validates file sizes, and verifies responsive image implementation using `srcset` and `sizes`. Furthermore, it guides best practices for lazy loading, prioritizing LCP images, and preventing Cumulative Layout Shift (CLS) by checking for dimensions.

Perform a comprehensive, deep-dive audit on a single URL, covering all critical aspects of Search Engine Optimization. Analysis includes on-page elements (title, headings, meta tags), content quality (readability, E-E-A-T), technical structure (schema, canonical, OG tags), image optimization, and core web vitals potential issues. Ideal for SEO audits and content quality checks.