1K skills · sorted by relevance
Find JavaScript code that changes existing objects or arrays, then replace those updates with modified copies. Review shared state and browser behavior to make data changes easier to trace and check fixes in context.
Review JavaScript error handling in source code and browser behavior. Find unhandled asynchronous failures, improve logs with useful context, and add React Error Boundaries, components that handle rendering errors, so failures are handled explicitly and are easier to investigate.
Review frequent JavaScript events and apply debounce, which waits until activity stops, or throttle, which limits execution frequency. Identify handlers causing sluggish interfaces or excessive API calls, and define browser checks for the fixes.
Audit how quickly a page shows its first text or image. Use performance measurements to identify blocking resources, slow server responses, and rendering delays, then recommend changes tied to the confirmed bottlenecks.
Write, review, and refactor React and Next.js code using performance guidelines from Vercel. Prioritized rules help identify sequential data requests, oversized JavaScript bundles, unnecessary re-renders, and other opportunities to improve loading and responsiveness.
Create Appium tests that automate Android and iOS app interactions in Java, Python, or JavaScript. Configure local devices, emulators, simulators, or TestMu AI cloud devices, with guidance on element selection, waits, and gestures.
Develop HTML and JavaScript web games through small changes and repeated Playwright tests, which automate browser actions. Inspect gameplay screenshots, text representations of game state, and console errors to check controls, outcomes, and newly added features.
Guide embedding Zoom Virtual Agent in an Android WebView, a browser view inside an app. Covers communication with Java or Kotlin, URL routing, support handoff events, and embedding that accounts for the WebView lifecycle.
Build custom browser video applications with Zoom Video SDK using JavaScript or TypeScript. Guidance covers session setup, participant video rendering, screen sharing, recording, and live transcription, with implementation patterns and troubleshooting for common integration problems.
Review Python, JavaScript/TypeScript, and Go code for security issues using guidance for the project's languages and frameworks. Get prioritized findings, suggested improvements, or help writing new code with safer defaults.
Build cryptocurrency exchange integrations with CCXT in JavaScript, Python, or PHP. The skill helps retrieve market data, manage orders, automate trading workflows, check exchange-specific capabilities, and investigate API errors using reproducible examples and logs.
Review Python, JavaScript/TypeScript, and Go code for security issues using guidance for the project's languages and frameworks. Get prioritized findings, suggested improvements, or help writing new code with safer defaults.
Build interactive dashboards, forms, and visualizations over the QM web interface using HTML, CSS, and JavaScript. Panels can send input to the conversation, update in place, or remain visible across sessions when requested.
Inspect and edit Figma files through JavaScript using the Plugin API. Guides changes to text, layout, variables, and components, with incremental steps and visual checks to verify the resulting design.
Add word-by-word reveal animations to headlines and short copy, with each word fading in and rising once as it enters view. Includes implementation examples that account for screen readers, reduced motion, and disabled JavaScript.
Build a burning-paper loading ring that keeps moving during heavy page setup. The skill covers background rendering, progress display, a smooth transition into the page, and support for reduced motion preferences.
Add CSS animations to web interfaces using ready-made patterns for menus, modals, loading states, text changes, and more. It selects a suitable pattern, connects markup and any required JavaScript, and preserves reduced-motion support.
Add a new safe-output message type to gh-aw, connecting configuration validation, Go parsing, and JavaScript rendering. Follow the required updates through tests, exports, documentation, and generated action bundles so the message reaches workflow output.
Build and extend JavaScript or TypeScript apps with TinyBase, keeping active data in the app runtime. The skill guides project generation, UI connections, data storage, and synchronization, with checks for reloads, two-client updates, and reconnection.
Triage new issues in the Sentry `javascript` project by archiving non-actionable noise. Use when asked to "triage issues", "triage the javascript project", "archive non-actionable issues", "triage new frontend issues", or "clean up the sentry/javascript queue". Operates only on the sentry/javascript project, only archives (never resolves), and always archives with `untilEscalating`.
The English summary is being prepared. Showing the original description.
Detects insecure platform interaction in mobile apps (Android/iOS). Trigger on: exported Activity, exported Service, exported BroadcastReceiver, Content Provider, Intent injection, deep link hijacking, WebView JavaScript enabled, JavascriptInterface, addJavascriptInterface, setJavaScriptEnabled, intent:// scheme, file:// scheme, WKWebView, WKScriptMessageHandler, UIPasteboard, URL scheme hijacking, Universal Links, PendingIntent, FLAG_IMMUTABLE, overlay attack, tapjacking, screenshot prevention, FLAG_SECURE, Broadcast sniffing, IPC data exposure. Covers MASVS-PLATFORM-1/2/3.
The English summary is being prepared. Showing the original description.
Deobfuscates malicious JavaScript from droppers, web pages, and HTA/scriptlets: unrolling string-array and char-code encodings, resolving eval/Function chains, and statically recovering payloads and URLs without executing untrusted code. Activates for requests to deobfuscate JavaScript, decode obfuscated JS, or analyze a malicious script dropper.
The English summary is being prepared. Showing the original description.
Guideline for designing, implementing, and verifying secure TypeScript and JavaScript applications following OWASP Top 10 best practices. Use when the user wants to: (1) review TypeScript or JavaScript code for security vulnerabilities, (2) design a secure Node.js, Deno, or browser application architecture, (3) implement security features (authentication, authorization, cryptography, input validation), (4) audit npm/yarn/pnpm dependencies for known vulnerabilities, (5) create security checklists or verification plans, (6) fix security bugs or harden existing TypeScript or JavaScript code, (7) set up security testing and static analysis (ESLint security plugins, Semgrep, Snyk), or (8) handle any TypeScript/JavaScript security concern including injection prevention, prototype pollution, XSS protection, SSRF prevention, secrets management, and secure deployment.
The English summary is being prepared. Showing the original description.
Migrating Classic Custom Buttons (Detail Page Buttons, List Buttons, Mass Action Buttons) and JavaScript Buttons to Lightning Quick Actions, Screen Flow Actions, LWC Quick Actions, and headless Quick Actions. Covers JavaScript-button-to-action translation patterns (sforce.apex.execute → Apex action, navigation alerts → toast events, MassAction.update → record-collection processing), URL button translation, and the irreversible loss of Classic JavaScript button capability in Lightning. NOT for new Quick Action design (use admin/global-actions-and-quick-actions) or Lightning record page composition (use admin/lightning-app-builder-advanced).
The English summary is being prepared. Showing the original description.