Skill UI

TaskEither is a functional programming utility from fp-ts designed for handling asynchronous operations that might fail. It provides a robust, type-safe mechanism for managing complex async workflows, such as chained API calls or promise wrappers. Instead of relying on traditional try/catch blocks where errors can be lost, TaskEither forces the developer to explicitly handle both success and failure paths, making error management predictable and composable.

This guide details how to seamlessly connect Odoo (ERP) with Shopify (E-commerce). It covers the full synchronization of mission-critical data, including product catalogs, real-time inventory levels, customer records, and incoming sales orders. Learn to implement API-driven integrations using webhooks, XMLRPC, and modern Python techniques to ensure data consistency across both platforms.

A comprehensive guide and methodology for identifying, measuring, and fixing performance bottlenecks across the entire stack. This skill covers optimizing database queries (e.g., N+1 problems, missing indexes), improving API efficiency (caching, parallel processing), and enhancing frontend performance (memoization, code splitting, image optimization). It emphasizes the critical 'Measure First' principle to ensure all optimizations are data-driven and effective.

This skill monitors the performance of Claude Code and the local operating system. It diagnoses slowdowns, measures CPU/RAM/Disk usage, checks API latency, and generates detailed system health reports. It helps determine if the bottleneck is local hardware or the remote API connection, providing actionable corrective suggestions to improve the development workflow.

A comprehensive guide for developing professional Telegram bots using the official Bot API. It covers the entire setup process, including BotFather configuration, message handling, webhooks, inline keyboards, and provides ready-to-use boilerplate code for both Node.js and Python. Ideal for creating robust, automated Telegram solutions.

This skill provides comprehensive integration with the X (Twitter) API, enabling users to programmatically post, read, search, and analyze tweets and timelines. It covers essential authentication patterns (OAuth 2.0 and OAuth 1.0a), rate limit handling, and best practices for building robust X integrations and bots.

This skill analyzes AWS CloudTrail logs to detect suspicious API call patterns, such as new event sources, geographic anomalies, or high-frequency usage. It establishes a statistical baseline of normal activity and flags deviations indicative of compromised credentials, privilege escalation, or insider threats, providing a detailed JSON report for security investigation and threat hunting.

This guide provides a comprehensive methodology for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications and APIs. It teaches testers how to systematically manipulate object identifiers (such as numerical IDs, UUIDs, or slugs) within API requests and URLs. Techniques involve using advanced tools like Burp Suite's Authorize extension to test object-level access control, validating both horizontal (same privilege) and vertical (different privilege) access restrictions during authorized penetration tests or bug bounty engagements.

This skill guides the detection and exploitation of JavaScript prototype pollution vulnerabilities. It covers both client-side (DOM XSS) and server-side (RCE, Auth Bypass) attacks by injecting properties into Object.prototype using keys like `__proto__`. Use this when assessing APIs that deep-merge or clone user-controlled JSON data, or for general web application security testing.

This solution enforces strict data contract validation for all APIs using OpenAPI Specification (OAS) and JSON Schema. It ensures that all incoming requests and outgoing responses conform to predefined structures. By implementing validation at both the API Gateway (runtime) and during development (shift-left), it effectively prevents critical security vulnerabilities such as SQL injection, XSS, unauthorized data leakage, and mass assignment.

Automatically reverse-engineers any codebase (frontend, backend, or fullstack) into a comprehensive Product Requirements Document (PRD). It analyzes complex elements like routes, components, API integrations, state management, and business logic across major stacks (React, Vue, Next.js, Django, FastAPI). The resulting PRD is detailed enough for both product managers (understanding 'what') and engineers/AI agents (understanding 'how' to reconstruct the system).

Gradio is a powerful Python library designed for creating interactive web user interfaces and showcasing machine learning demos quickly. This skill covers core patterns like Interface, Blocks, and ChatInterface, allowing users to build complex applications, components, and event-driven chatbots with minimal effort. Ideal for rapid prototyping and deep learning model visualization.