Skill UI

This skill guides security testers in identifying excessive data exposure in REST and GraphQL APIs. It involves intercepting API responses and analyzing them for leaked Personally Identifiable Information (PII), internal identifiers, or sensitive business data that the client UI does not display but the API transmits. It maps directly to OWASP API3:2023 Broken Object Property Level Authorization, helping prevent data leaks via over-fetching.

This tool performs comprehensive security testing on GraphQL APIs by generating deeply nested, recursive, or highly repetitive queries. It specifically aims to identify Denial-of-Service (DoS) vulnerabilities and resource exhaustion issues by overwhelming the server's CPU, memory, or database connections. Essential for security auditors and penetration testers.

A comprehensive framework for testing REST and GraphQL APIs against Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR). This tool simulates an attacker's behavior by systematically intercepting and modifying object identifiers (IDs, UUIDs, slugs) within API calls. It helps identify critical authorization flaws, ensuring that an authenticated user cannot access or modify resources belonging to other tenants or users, adhering to OWASP API Security Top 10.

Guides designing stable, well-documented interfaces for APIs, module boundaries, and component props to make correct usage easy and inadvertent mistakes difficult.

A comprehensive guide for integrating and utilizing Firebase Data Connect within Flutter applications. Learn how to set up schemas, write typed GraphQL queries and mutations, handle real-time data streams, implement robust offline capabilities, and apply best practices for security and performance.

Automates Linear issues, projects, cycles, labels, comments, and GraphQL workflows through Rube MCP’s Composio toolkit so teams can manage states, tasks, and custom queries without juggling direct APIs.

A comprehensive checklist designed for assessing the security posture of GraphQL endpoints. It covers advanced vulnerabilities such as introspection abuse, IDOR, query depth/complexity DoS, injection attacks (SQLi/NoSQLi), and authorization bypass mechanisms. Essential for professional penetration testing and bug bounty hunting.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

A comprehensive guide for deep debugging complex Shopify API issues. Learn how to use GraphQL introspection, analyze query cost headers, trace specific requests using X-Request-Id, and inspect webhook delivery status. This skill helps diagnose intermittent failures, throttling, and data inconsistencies in high-volume e-commerce environments.

This wrapper integrates Shopify's official AI Toolkit MCP server with Claude Code. It provides essential developer capabilities, including real-time GraphQL schema validation, Liquid template linting (checking for deprecated filters and anti-patterns), and instant search across Shopify's extensive documentation. Use this skill when setting up complex Shopify MCP integrations, ensuring code quality, or debugging API calls.

A comprehensive guide for diagnosing and fixing common Shopify API errors, including HTTP status codes (401, 403, 422, 429) and GraphQL userErrors. This tool helps developers quickly identify the root cause of failed API requests, whether due to incorrect scopes, expired tokens, or validation issues, and provides actionable steps for resolution.

This skill guides developers and SaaS founders on minimizing operational costs when building on the Shopify platform. It covers deep dives into Shopify store plan rate limits, optimizing GraphQL and REST API usage, implementing robust cost tracking mechanisms, and applying advanced strategies like caching and bulk operations to reduce billable expenditures.