Skill UI

A comprehensive skill guide for implementing all forms of data fetching and networking in React Native/Expo environments. Covers best practices for using the native fetch API, managing state with React Query (TanStack Query), implementing robust error handling with retry logic, handling offline scenarios, and securely managing authentication tokens. Essential for building reliable, scalable mobile applications that interact with external APIs.

This guide provides expert knowledge on interacting with Odoo's external JSON-RPC and XML-RPC APIs. Learn how to handle authentication, perform model calls, and execute CRUD operations (Create, Read, Update, Delete) using practical examples in Python, JavaScript, and cURL. Ideal for building middleware or robust data synchronization tools.

Full Instagram Graph API integration for Business/Creator accounts, handling publishing, analytics, comments, DMs, hashtags, scheduling, templates, dashboards, and governance; suited for automating multi-format campaigns via scripts and APIs.

A powerful code review utility designed for SwiftUI projects. It comprehensively analyzes code quality, ensuring adherence to modern Swift APIs, optimal performance, robust data flow management, and compliance with Apple's Human Interface Guidelines and accessibility standards (like VoiceOver and Dynamic Type). Use this tool when writing, refactoring, or reviewing complex SwiftUI implementations to maintain high code hygiene and maintainability.

This skill provides methods for reliably extracting typed, validated, and structured data from Large Language Models (LLMs), moving beyond simple text parsing. It covers best practices across major APIs (OpenAI's response_format, Anthropic's tool_use, Google's responseSchema) and local models. Key workflows include defining schemas (Pydantic/Zod), implementing constrained decoding, and building robust retry loops for production-grade data pipelines.

A comprehensive guide to using k6 for robust performance and load testing across APIs, WebSockets, and browser scenarios. Learn to write realistic load simulations (smoke, load, stress, soak), analyze performance metrics, set SLAs, and integrate testing into CI/CD pipelines to ensure system reliability before deployment.

This guide details the deployment and usage of MISP (Malware Information Sharing Platform) to centralize, correlate, and distribute threat intelligence. It covers architectural concepts, integrating diverse OSINT and commercial feeds (like abuse.ch, AlienVault OTX), and automating the flow of Indicators of Compromise (IOCs) into SIEM and SOAR systems via Docker and Python APIs.

This guide details how to build automated threat intelligence enrichment pipelines within Splunk Enterprise Security. By leveraging the Threat Intelligence Framework, users can ingest, normalize, and correlate Indicators of Compromise (IOCs) from diverse external sources (such as TAXII, CSV, and custom APIs). The process uses KV Store collections and lookup searches to enrich raw security events with critical threat context, significantly reducing triage time for SOC teams.

This guide details advanced techniques for authorized security assessments, focusing on forced browsing. It helps testers discover hidden administrative pages, unprotected APIs, and configuration files by systematically enumerating URLs and challenging application access control mechanisms. Techniques involve using tools like ffuf and Gobuster for comprehensive path and directory discovery.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

This tool helps detect Broken Object Property Level Authorization (BOPLA) vulnerabilities, which are critical security flaws detailed in OWASP API3:2023. It scans APIs for excessive data exposure (reading sensitive fields) and mass assignment risks (modifying unintended properties) by simulating malicious requests and analyzing responses. Ideal for security testing, threat hunting, and implementing robust API security controls.

A comprehensive framework for penetration testing APIs, designed to detect and exploit critical injection flaws. It covers SQL injection (SQLi), NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF). This skill guides the testing of all input vectors—including path parameters, headers, query strings, and request bodies—to assess input validation and backend security posture against industry standards like OWASP.