Skill UI

A comprehensive guide detailing security best practices for integrating with Klaviyo. Learn how to manage private and public API keys, implement least-privilege scoping for different environments (Dev, Staging, Prod), and critically, how to verify webhook payloads using HMAC-SHA256 signatures. This guide is essential for developers building robust and secure marketing automation pipelines.

A comprehensive checklist designed to harden Linktree API integrations for high-concurrency, production-grade reliability. It covers critical aspects including secure secrets management, rate limit handling, robust error resilience (circuit breakers, exponential backoff), comprehensive monitoring setup, and advanced security practices like webhook signature verification. Use this guide to ensure link-in-bio analytics remain accurate and system uptime is maximized under viral traffic loads.

This comprehensive guide assists developers migrating their Miro integrations from REST API v1 to v2. It details key breaking changes, such as 'Widget' becoming 'Item' and 'Line' becoming 'Connector,' provides updated endpoint maps, and offers step-by-step instructions for upgrading the `@mirohq/miro-api` SDK and adapting request/response payloads. Use this resource when updating your integration to handle the latest Miro platform standards and data structures.

Use this comprehensive bundle to systematically collect diagnostic data from Navan API integrations. It captures critical information including OAuth token details, full API request/response payloads, network connectivity metrics, and local environment state. This tool is essential for developers and integrators needing to perform deep troubleshooting and pinpoint complex API failures.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill provides comprehensive functionality for provisioning, managing, and scaling Oracle Cloud Infrastructure (OCI) compute instances using the Python SDK. It addresses common challenges like "out of host capacity" errors by implementing robust retry logic across multiple Availability Domains (ADs). Users can select optimal Flex shapes (AMD, ARM, Intel), manage the entire instance lifecycle (start, stop, reboot, terminate), and retrieve network details, ensuring reliable cloud workload deployment.

This skill automates the systematic verification of mathematical proofs through cross-model adversarial review. It reads a LaTeX proof, identifies logical gaps and structural weaknesses, fixes each gap with full derivations, and re-reviews until convergence. Finally, it generates a detailed audit report, ensuring mathematical rigor and accountability.

This guide provides best practices for scaling multi-tenant deployments in Qdrant. It advises against the inefficient 'one collection per tenant' approach. Solutions include using shared collections with payload filtering, implementing custom sharding for large-scale tenants (100k+), and employing tiered multitenancy for unevenly sized workloads, ensuring optimal resource utilization and performance.

This skill establishes an autonomous, iterative build loop for continuous website development. It functions as an agent that reads tasks from a 'baton' file, utilizes the Stitch MCP tools to generate structured web pages, integrates the generated HTML assets into the main site structure, and finally updates the baton file with the next required task. It supports end-to-end, programmatic site building and includes optional visual verification using Chrome DevTools.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This skill details advanced techniques for exploiting formula injection vulnerabilities within CSV, Excel, LibreOffice, and Google Sheets environments. It covers DDE, obfuscation methods, and high-risk functions like IMPORT* that can be triggered when user-controlled data is exported or imported into spreadsheet software. Use this for penetration testing of data pipelines and export features.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.