Skill UI

This guide provides comprehensive technical details and rate limit guidance for integrating with the Workhuman Social Recognition and Rewards API. It covers key concepts such as OAuth 2.0 authentication, peer-to-peer recognition workflows, and bidirectional synchronization with major HRIS systems (e.g., Workday, SAP). Use this when developing applications that automate employee recognition, manage rewards, or build complex HR workflows.

This guide provides the reference architecture for integrating Workhuman's Social Recognition and rewards APIs. It details key concepts like OAuth 2.0, peer-to-peer recognition, and configurable awards. Use this skill when building complex employee recognition workflows, syncing data bi-directionally with HRIS systems (e.g., Workday, SAP), or integrating with collaboration tools like Slack and Microsoft Teams.

This guide provides comprehensive SDK patterns and API documentation for integrating Workhuman Social Recognition and rewards systems. It covers key concepts like OAuth 2.0 authentication, peer-to-peer nominations, configurable award levels, and bidirectional synchronization with major HRIS platforms (Workday, SAP). Use this resource when building custom recognition workflows or integrating Workhuman functionality into enterprise systems.

This guide provides comprehensive security and integration details for the Workhuman Social Recognition and rewards API. Learn how to implement OAuth 2.0, manage peer-to-peer nominations, and sync data bidirectionally with major HRIS platforms like Workday and SAP SuccessFactors. Use cases include building custom recognition workflows and integrating with popular tools like Microsoft Teams and Slack.

A tool that generates and opens a GitHub Pull Request (PR) dashboard in the browser. Users can specify precise criteria, including date ranges (e.g., 'last 7 days', 'this month') and specific roles (e.g., 'Authored by me', 'Requested reviews'), to view detailed PR activity. Requires GitHub CLI authentication for full functionality.

This skill provides comprehensive tools and methodologies for generating OpenAPI/Swagger documentation within Go projects. By utilizing specialized annotation comments (@Summary, @Param, @Success, etc.), developers can treat their code as a self-documenting contract. It supports integrating with various popular Go frameworks (Gin, Echo, Fiber) and handles complex features like security definitions (JWT, OAuth2) and custom type tagging, ensuring the Swagger UI is always the authoritative source of truth for API consumers.

Covers Bluetooth Low Energy attack workflows, including GATT enumeration, unauthenticated characteristic access, pairing downgrade checks, MITM during pairing, sniffing, and companion app reverse engineering for IoT and consumer BLE devices.

Covers WPA3/SAE attack techniques including transition-mode downgrade, Dragonblood side-channel analysis, SAE authentication flooding, H2E checks, and Wi-Fi 6E implications. Useful for assessing wireless security gaps and validating defensive hardening.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

A comprehensive playbook for security testing APIs relying on JWT, bearer tokens, or API keys. It covers token validation weaknesses (e.g., 'alg:none', RS256 confusion), claim misuse, header spoofing, rate limit bypass, and mass assignment vulnerabilities. Ideal for penetration testers assessing authentication boundaries.

This comprehensive playbook guides security testers through deep API authorization checks, focusing specifically on BOLA (Broken Object Level Authorization) and BFLA (Broken Function Level Authorization). Use this skill to test scenarios where object identifiers, nested resources, or privileged functions are exposed, ensuring thorough checks for mass assignment and privilege escalation.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.