Results for “web-app”

Systematically audits a web application against the OWASP 2021 Top 10, producing severity-rated, file-level findings with fixes for each category.

Direct browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work.

Automates Chrome/Chromium via CDP with accessibility-tree snapshots and element refs, covering web pages, Electron apps, Slack, and cloud browsers.

OWASP Top 10 audit checklists for Web Applications (2021), APIs (2023), and Mobile (2024). Use when performing any security review, PR review, or codebase audit touching web, mobile, or API code.

Creates Apple-style soft UI prototypes with squircle cards, spring motion, and ambient mesh backgrounds.

Deploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy configuration for Java and Python web applications.

Test web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.

Applies a battle-tested bilingual web-design system with typography, responsive rules, and performance patterns for Yuval Avidani's projects.

Audit web applications for WCAG compliance. TRIGGERS - Use when user needs help with wcag-audit related tasks.

Creates consistent icon sets in multiple sizes and formats for web and mobile applications

Audit web applications for WCAG compliance. TRIGGERS - Use when user needs help with wcag-audit related tasks.

Browser automation with persistent page state. Use when users ask to navigate websites, fill forms, take screenshots, extract web data, test web apps, or automate browser workflows. Trigger phrases include "go to [url]", "click on", "fill out the form", "take a screenshot", "scrape", "automate", "test the website", "log into", or any browser interaction request.

Perform dynamic security testing against running web applications and APIs to discover vulnerabilities through active probing and fuzzing. Use when the user requests dynamic application security testing or provides relevant inputs for this workflow.

Tests web applications for Cross-Site Scripting (XSS) vulnerabilities by injecting JavaScript payloads into reflected, stored, and DOM-based contexts to demonstrate client-side code execution, session hijacking, and user impersonation.

Build real-time voice AI applications using the Azure AI Voice Live SDK for bidirectional WebSocket audio communication.

Reduces a webpage to a structural skeleton by tokenizing content in the browser and applying LLM reasoning to collapse repeated patterns.

Records polished UI demo videos of web applications using Playwright, with an injected cursor overlay, natural pacing, and a discover-rehearse-record workflow.

Measures application performance first, identifies bottlenecks, and applies targeted fixes for frontend and backend systems.

Deploy applications and websites to Vercel as preview or production deployments.

Build real-time voice AI applications with bidirectional WebSocket communication using the Azure AI Voice Live SDK for JavaScript/TypeScript.

Build fast, type-safe web APIs and full-stack apps with Hono, deployable to Cloudflare Workers, Deno, Bun, Node.js, and other WinterCG-compatible runtimes.

Routes security testing tasks to the correct vulnerability category, guiding recon, validation, privilege escalation, and chain building for web application and API security assessments.

App Store Optimization for mobile launches (iOS App Store, Google Play). Use when preparing a mobile app launch, optimizing app store listings, planning screenshot sequences, writing app store copy, doing keyword research for app stores, planning preview videos, managing reviews, or A/B testing app store assets. Relevant for Expo/React Native apps going to stores. Not for web-only products.

Build fast, type-safe web APIs and full-stack apps that run on Cloudflare Workers, Deno, Bun, Node.js, and other WinterCG-compatible runtimes.

Records polished UI demo videos of web applications using Playwright, with an injected cursor overlay, natural pacing, and a discover-rehearse-record workflow.

Build fast, type-safe web APIs and full-stack apps that run on Cloudflare Workers, Deno, Bun, Node.js, and other WinterCG-compatible runtimes.

Build full-stack web applications with SvelteKit — file-based routing, SSR, SSG, API routes, and form actions in one framework.

Build full-stack web applications with SvelteKit — file-based routing, SSR, SSG, API routes, and form actions in one framework.

Adversarial red-team of a running web, React Native, or Capacitor hybrid app. Use when asked to "red team this app", "attack my app", "break it", "find all the defects", "adversarial test", "pre-launch hardening", "pentest the app", or "full app QA". Naive monkey / guest vs logged-in wander → test-exploratory.

Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap.

Runs 150+ AI apps in the cloud via the inference.sh CLI, covering image generation, video creation, LLMs, web search, 3D generation, and Twitter automation.

Set an ECC-specific frontend design direction for production UI work. Use when building or improving websites, dashboards, applications, components, landing pages, visual tools, or any web UI that needs stronger product-specific design judgment.

Qwik is a resumable web framework that delivers instant-loading applications by eliminating hydration. It serializes application state on the server and lazily loads JavaScript on interaction, making it ideal for edge deployment.

Web and App implementation guide for 3D UI. Trigger when user wants actual 3D objects, perspective effects, and spatial depth.

Build full-stack web applications with SvelteKit — file-based routing, SSR, SSG, API routes, and form actions in one framework.

Deployment workflows, CI/CD pipeline patterns, Docker containerization, health checks, rollback strategies, and production readiness checklists for web applications.