Skill UI

This tool automates the process of executing the JWT none algorithm attack. It demonstrates how to bypass signature verification by setting the 'alg' header to 'none' in a JSON Web Token. This vulnerability allows attackers to forge tokens with arbitrary claims, such as escalating privileges or impersonating other users, and is crucial for penetration testing and API security auditing.

This skill provides a comprehensive methodology for identifying and exploiting open redirect vulnerabilities in web applications. It covers advanced bypass techniques (e.g., URL encoding, protocol-relative URLs, path traversal) and demonstrates chaining with other flaws like OAuth redirection for advanced phishing simulations and token theft. Designed for authorized security professionals conducting penetration tests.

This skill provides an interactive, guided onboarding tour for the Context-Matic MCP server. It addresses the challenge of general AI models relying on outdated or incorrect public code by acting as a live, version-aware grounding layer. The tour walks users through the server's core function, demonstrates key tools (like fetching APIs, searching models, and finding endpoints), and guides them through selecting and exploring available APIs for their specific project language.

This skill demonstrates how to create an event-driven pipeline using Figma's Webhooks. It listens for design file changes and automatically triggers Anima to regenerate production-ready code components (e.g., React/TypeScript/Tailwind). Ideal for integrating continuous design updates into CI/CD workflows.

A comprehensive guide to interacting with the AppFolio Property Manager REST API. This skill demonstrates essential operations, including client authentication, listing properties, retrieving detailed tenant information, and creating work orders. Ideal for developers building automation workflows for real estate and property management systems.

A foundational guide to interacting with the Fathom API. This skill demonstrates essential use cases, including listing meetings, fetching detailed transcripts, and retrieving AI-generated summaries and action items. It is ideal for initial API testing, validating connectivity, or understanding the Fathom data response structure.

This guide provides a minimal working example for integrating with the Flexport REST API v2. It demonstrates core logistics operations, including listing shipments, retrieving detailed shipment milestones, and listing associated containers. It is ideal for developers starting a new Flexport integration, testing API connectivity, or learning the basic API patterns.

This skill guides developers on implementing event-driven logic for Hex CI/CD workflows. Since Hex does not provide native push webhooks, this method demonstrates how to poll run statuses using callbacks (e.g., TypeScript) to reliably detect task completion or failure. It is essential for integrating Hex pipelines with external services like Slack or custom notification systems.

Provides a minimal working example for integrating with the BambooHR API. It demonstrates fetching the complete employee directory, retrieving details for a single employee, and running custom reports. This guide is ideal for users starting new HR system integrations, testing API connectivity, or learning core HR data operations.

This guide provides a comprehensive deep dive into migrating applications from OpenAI (GPT) to Anthropic (Claude). It details critical API differences, including changes in system prompt handling, function calling formats, and response parsing. It also demonstrates how to build a robust, multi-provider abstraction layer for seamless LLM switching.

A comprehensive, production-ready reference architecture for building robust, scalable transcription services using AssemblyAI. This guide demonstrates best practices for layered system design, covering API endpoints, service logic, client management, and infrastructure integration (webhooks, database). It is ideal for designing new high-throughput speech-to-text applications.

This guide implements production-grade reliability patterns for integrating with external APIs, specifically Adobe services. It demonstrates how to use circuit breakers to prevent cascading failures, implement graceful degradation with cached fallbacks, and utilize dead letter queues (DLQ) for reliable asynchronous job handling. It ensures your application maintains high availability even when external services are unstable or rate-limited.