Browse Skills

Encodes Emil Kowalski's design engineering philosophy for crafting interfaces with invisible polish, thoughtful component design, and intentional animation decisions. Use when building or reviewing UI to ensure every detail compounds into software that feels right.

Reviews animation and motion code against a high craft bar, flagging issues with easing, timing, origin, interruptibility, GPU properties, and more. Use when reviewing UI animations for quality and cohesion.

This skill encodes Emil Kowalski's philosophy on UI polish, component design, animation decisions, and the invisible details that make software feel great.

Reverse-lookup glossary that turns a vague description of a web animation or motion effect into its exact term. Use when the user asks "what's it called when…", or describes a motion effect without knowing its name and wants the right word to prompt an AI or designer with.

OKLCH color space tools for web projects. Convert hex/rgb/hsl, generate perceptually uniform palettes, check APCA/WCAG contrast, handle gamut boundaries, and integrate with Tailwind v4. Use when working with oklch, color conversion, palette generation, contrast, or dark mode.

Design engineering principles for polished interfaces: typography, surfaces, animations, and performance details. Use when building UI components, reviewing frontend code, or refining visual details.

Teaches AI agents how to configure and use the FreeTheAi API, a free OpenAI-compatible gateway. Use this skill when connecting apps, coding tools, or chat clients to FreeTheAi for chat, streaming, tool calling, images, TTS, or STT.

Uses Postman to build repeatable API security test collections covering OWASP API Security Top 10, with multi-role auth testing and CI/CD integration via Newman.

Tests API rate limiting implementations for bypass vulnerabilities using header manipulation, endpoint variation, and race conditions. Useful for security assessments to evaluate rate limit effectiveness against brute force and credential stuffing attacks.

Identifies all API endpoints in an organization's environment for security assessments, including shadow, zombie, and undocumented APIs through passive traffic analysis and active scanning.

Perform automated stateful REST API fuzzing with Microsoft RESTler. It generates and executes test sequences from OpenAPI specs to discover security bugs, input validation flaws, and unhandled exceptions.

Implements API threat protection using Google Apigee policies including JSON/XML content validation, OAuth 2.0 enforcement, rate limiting, and injection defense. Use it to secure APIs against OWASP Top 10 threats in enterprise environments.