Web & Frontend

odjaramillo Skill

Guidelines for implementing Supabase Auth SSR in Next.js. Trigger: When implementing Supabase authentication.

odjaramillo Skill

Modern React patterns and principles. Hooks, composition, performance, TypeScript best practices.

odjaramillo Skill

Patterns for using Tailwind CSS with React components. Trigger: When using Tailwind CSS with React components.

odjaramillo Bundle

Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.

sairam0424 Skill

Skill — React Performance

sairam0424 Skill

Skill — React Native Architecture Patterns

ricneves-ai Skill

23 skills de engenharia prontas para produção para Claude Code. Arquitetura, frontend, backend, QA, DevOps, segurança, IA/ML, engenharia de dados, Playwright, Stripe, AWS, MS365. ferramentas Node.js, TypeScript e scripts utilitários.

purpleailab Skill

DOM clobbering — abuse named HTML elements to overwrite JavaScript global variables, bypass CSP, hijack object property lookups.

purpleailab Skill

HTML smuggling payloads for initial access — embed base64-encoded binaries inside an HTML attachment that reconstructs and auto-downloads the file client-side via JavaScript Blob, bypassing email gateway and proxy file-type inspection.

netvar1337 Bundle

Use when engineering initial-access documents for authorized red-team delivery — Office VBA macro construction and signing, LNK shortcut generation, ISO/IMG container nesting, OneNote embeds, RTF/OLE exploitation vs packaging, HTML smuggling with JS blob construction, and Mark-of-the-Web propagation semantics across container types. Covers sandbox/AV evasion heuristics, emulator breakpoint awareness, detonation telemetry expectations, and payload staging handoff.

netvar1337 Bundle

Use when doing frontend JavaScript reverse engineering with js-reverse-mcp; applies to signature-chain locating, page observation forensics, runtime sampling, local environment-patched reproduction, and evidence-based output. Prefer the js-reverse_* tools present in the current environment; bring in jshookmcp when a stronger browser/CDP/Hook surface is needed.

netvar1337 Bundle

WAF bypass techniques checklist: encoding bypass (URL/HTML/Unicode/double encoding), case variation, comment injection, HTTP header manipulation, chunked encoding, IP rotation, timing attacks, and payload obfuscation per WAF vendor. Use when WAF is blocking payloads during web app tests.

netvar1337 Bundle

File upload vulnerability checklist: MIME type bypass, extension bypass, magic byte manipulation, path traversal in filenames, stored XSS via SVG/HTML upload, server-side processing attacks, and race conditions. Use for assessing file upload endpoints in web app pentests or bug bounty.

tangledgroup Bundle

Fetches any URL and converts the full page to clean AI-targeted markdown using scrapling. Use when scraping arbitrary web pages, documentation, articles, or HTML content into a format suitable for AI context without requiring an API key.

tangledgroup Bundle

A skill for using htm 3.1, a tagged template syntax library that provides JSX-like markup in plain JavaScript without requiring a transpiler. Use when building browser-compatible React/Preact applications with native ES modules, implementing server-side rendering, or creating lightweight UI components without build tooling.

tangledgroup Bundle

A skill for using htm 3.1, a tagged template syntax library that provides JSX-like markup in plain JavaScript without requiring a transpiler. Use when building browser-compatible React/Preact applications with native ES modules, implementing server-side rendering, or creating lightweight UI components without build tooling.

tangledgroup Bundle

Ultra-lightweight semantic UI component library (~8KB CSS + JS, zero dependencies) that styles HTML elements by default without classes. Provides 27 components including buttons, forms, cards, dialogs, tabs, dropdowns, toasts, tooltips, grids, and sidebar layouts with automatic light/dark mode. Use when building web applications with minimal CSS/JS footprint, semantic-first markup, no build tools, or when replacing heavier frameworks like Bootstrap or Tailwind for simple UI needs.

tangledgroup Bundle

Searches DuckDuckGo via its HTML endpoint and outputs results as raw YAML. Uses a deterministic bash script, extracts search results, and prints exact YAML output.

tangledgroup Bundle

Searches DuckDuckGo via its HTML endpoint using scrapling. Returns results as markdown (default), raw HTML, compact JSON, or YAML. Use when performing web searches from within an agent workflow without requiring a search API key or external service.

tangledgroup Bundle

Build interactive web applications with htmx 4.0, a JavaScript library providing HTML attributes for AJAX, CSS transitions, WebSockets, and SSE without writing JavaScript. Use when creating dynamic user interfaces with hypermedia-driven architecture, migrating from htmx 2.x, or implementing declarative HTML patterns. Note: 4.0 is a beta release.

tangledgroup Bundle

Complete reference for htmx 2.0.10 — the HTML attributes library for AJAX, WebSockets, SSE, and dynamic DOM updates without writing JavaScript. Covers all core attributes, 7 core extensions, 30+ community extensions, third-party integrations (Alpine.js, jQuery, hyperscript, SortableJS, Web Components, SweetAlert2, Tom Select), 25+ UX patterns, configuration, security, validation, history/boosting, caching, and migration guides.

tangledgroup Bundle

Renders DOCX documents into semantic HTML in the browser using JavaScript. Use when converting Word documents to HTML preview, building document viewers, or rendering .docx files client-side with jszip dependency.

tangledgroup Bundle

Complete toolkit for Jinja2 v3.1.6 templating engine covering template design, Python API integration, custom filters/tests, sandboxed environments, and async support. Use when building Python applications requiring dynamic HTML generation, email templates, configuration files, or any text-based output with logic separation from presentation.

tangledgroup Bundle

A skill for using DaisyUI 5.5, a component library for Tailwind CSS 4 that provides semantic class names for common UI components with built-in theming support. Use when building responsive web interfaces with pre-styled components, implementing theme switching, or creating consistent design systems without writing custom CSS.

tangledgroup Bundle

Python framework for building terminal and browser UIs. Provides widget-based DOM, CSS styling (.tcss), reactive attributes, event system, Workers API for concurrency, command palette, and theming. Use when building terminal UIs, CLI tools with rich interfaces, data dashboards, interactive forms, or any Python application requiring a graphical interface in the terminal.

tangledgroup Bundle

Python framework for building terminal and browser UIs. Provides widget-based DOM, CSS styling (.tcss), reactive attributes, event system, Workers API for concurrency, command palette, and theming. Use when building terminal UIs, CLI tools with rich interfaces, data dashboards, interactive forms, or any Python application requiring a graphical interface in the terminal.

tangledgroup Bundle

A skill for using DaisyUI 5.5.19, a component library for Tailwind CSS 4 that provides semantic class names for common UI components with built-in theming support. Use when building responsive web interfaces with pre-styled components, implementing theme switching, or creating consistent design systems without writing custom CSS.

tangledgroup Bundle

Complete toolkit for esbuild v0.28 JavaScript bundler providing CLI, JavaScript API, and Go API access for bundling, minification, transformation, and development workflows with support for TypeScript, JSX, CSS modules, tree shaking, source maps, watch mode, and local development server without requiring npm installation via npx execution. Use when bundling JavaScript/TypeScript projects, configuring build pipelines, setting up watch mode for development, or transforming code without npm dependencies.

tangledgroup Bundle

Universal document converter supporting 50+ input formats (Markdown, HTML, LaTeX, docx, EPUB, Org, RST, AsciiDoc) and 60+ output formats including PDF. Provides metadata blocks, citations, math rendering, templates, Lua filters, and custom readers/writers. Use when converting between document formats, generating PDFs from markup, transforming Markdown to HTML/LaTeX/Word, processing bibliographic citations, or building document conversion pipelines.

netvar1337 Bundle

HTTP parameter pollution (HPP) checklist: duplicate parameter injection, backend vs frontend parsing differences, WAF bypass via HPP, server-side vs client-side HPP, and practical exploitation patterns. Use when testing web applications for parameter handling flaws.

wufufu770 Skill

CISA KEV 已知被利用漏洞目录比对：组件 CVE 是否在 KEV 清单、优先级判定。触发词：KEV、已利用漏洞、在野利用。component-nday 匹配出 CVE 后必查。

wufufu770 Skill

Fingerprint web application components and match against known N-day vulnerabilities (CVEs, public PoCs). Use exposed version strings, header fingerprints, and behavioral patterns to identify the exact component and version, then query CVE databases (NVD, KEV, ExploitDB) for known exploits. Core workflow for SRC/CNVD generic-type report generation.

wufufu770 Skill

Workflow for component N-day vulnerability hunting — fingerprint, CVE match, PoC development, impact argumentation, report generation. The complete pipeline for SRC/CNVD generic-type reports. Bridges recon (fingerprint) through validation (fp-check) to reporting.

ntizar Skill

MapCN — componentes de mapa React listos para usar (MapLibre GL + Tailwind + shadcn/ui), de AnmolSaini16/mapcn.

ntizar Bundle

Conocimiento completo de ESIOS/REE: API, indicadores, unidades, deploy en NaN, troubleshooting frontend, informes Telegram, Open-Meteo, Yahoo Finance. Unificado de 5 skills en 1.

ntizar Bundle

Patrón completo para crear una webapp que convierte PDFs de propuestas de diseño en landing pages generadas por IA — extracción de texto, análisis de diseño, generación HTML, descarga directa o deploy.