Skill UI

This comprehensive guide establishes a structured local development environment for integrating with the Navan API. Since Navan does not provide a sandbox, this workflow is crucial for minimizing calls to the production API. It implements token caching to persist access tokens, detailed request logging for debugging, and mock fixtures to allow for reliable, safe offline testing during the development cycle.

Designed to handle API integrations for services like Navan that lack a dedicated sandbox environment. This skill implements robust environment isolation (Development, Staging, Production) using separate OAuth credentials, advanced environment variable management, and a local development proxy/mock server. It ensures that development, testing, and CI/CD processes can run safely without modifying live production data.

A comprehensive guide for performing end-to-end (E2E) and integration testing on the Nexu → OpenClaw gateway stack. It details the architectural constraints and viable testing methods, emphasizing the use of Vitest for reliable internal function testing (e.g., skill snapshotting, session store logic). Use this when verifying core gateway fixes, testing skill loading after restarts, or simulating complex operational scenarios.

This skill guides users through setting up a robust, local development loop for Notion integrations. It covers creating dedicated development tokens, structuring the project for testability, implementing mocked SDK unit tests, and handling API rate limits with exponential backoff retries. This ensures rapid, reliable iteration and testing without compromising production data safety.

This skill provides a comprehensive, production-grade reference architecture for building robust Notion integrations. It defines a multi-layered structure, including client singletons, repository patterns, service orchestration, and caching mechanisms. It is essential for migrating ad-hoc API calls to scalable, event-driven, and highly reliable enterprise applications that incorporate rate limiting, sophisticated error handling, and comprehensive testing strategies.

This is a detailed offensive checklist for identifying and exploiting insecure deserialization vulnerabilities across multiple programming languages (Java, Python, PHP, .NET, Node.js, etc.). It covers techniques like gadget chain generation, magic method abuse, type confusion, and modern attack vectors, providing a deep methodology for penetration testing and vulnerability research.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.

This comprehensive curriculum provides a detailed roadmap for mastering exploit development and vulnerability research. It covers fundamental techniques like fuzzy testing using AFL++, and progresses through advanced topics such as in-process fuzzing with Google FuzzTest. It is ideal for structuring professional security training programs or onboarding new research engineers.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

A comprehensive checklist designed for assessing the security posture of GraphQL endpoints. It covers advanced vulnerabilities such as introspection abuse, IDOR, query depth/complexity DoS, injection attacks (SQLi/NoSQLi), and authorization bypass mechanisms. Essential for professional penetration testing and bug bounty hunting.

This comprehensive checklist guides penetration testers through discovering Insecure Direct Object References (IDOR). It covers techniques like object ID enumeration, horizontal and vertical privilege escalation, and parameter manipulation. Use it for web application pentests and bug bounty hunting to identify broken access control vulnerabilities.

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.