Skill UI

This skill provides a robust solution for configuring the Miro REST API v2 across development, staging, and production environments. It details best practices for achieving environment isolation by utilizing separate OAuth applications, dedicated board IDs, and implementing enterprise-grade secret management (e.g., AWS Secrets Manager, Vault). This setup prevents development activities from accidentally impacting critical production data.

This skill addresses the challenge of managing Dev/Staging/Prod separation in OCI without native account separation. It uses Python to centralize configuration profiles, compartment IDs, and implements safety guardrails (like blocking destructive actions in production) to prevent accidental cross-environment deployments, ensuring repeatable and secure cloud workflows.

This skill is designed to collect comprehensive diagnostic information regarding Persona identity verification processes. It retrieves inquiry IDs, current status, API responses, and webhook delivery logs. It is essential for troubleshooting issues related to KYC and identity verification workflows, ensuring smooth API connectivity and data flow.

This guide details how to establish secure API access to the Procore construction management platform. It utilizes the OAuth2 client credentials flow, allowing developers to obtain necessary access tokens using client IDs and secrets. This setup is crucial for integrating custom applications to manage projects, retrieve RFIs, or handle submittals programmatically.

This comprehensive guide teaches how to build fault-tolerant, production-grade Salesforce integrations. It covers key reliability patterns including circuit breakers for API outages, idempotent upserts using External IDs, advanced retry logic with error classification, and graceful degradation using fallback caching. Use it when designing mission-critical services that must remain resilient against network failures and API limits.

This guide details how to perform authentication and data operations with the Veeva Vault platform using its REST API. It covers obtaining session IDs via username/password or OAuth 2.0, and executing complex queries using VQL (Veeva Query Language). Ideal for developers integrating document management systems in the life sciences sector.

Configure secure and isolated Webflow integrations across development, staging, and production environments. This guide details how to manage separate API tokens, Site IDs, and secure secrets using industry-standard secret managers like HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager, ensuring data integrity and reliable deployment in a CI/CD pipeline.

Methodology for passive Wi-Fi reconnaissance: choose compatible adapters, enable monitor mode, set regulatory domains, sweep 2.4/5/6 GHz bands, identify hidden SSIDs, clients, vendors, and encryption before active wireless attacks.

A powerful technique used when full XSS is blocked by CSP, sanitizers, or WAFs, but HTML injection is possible. It leverages unclosed HTML tags (like <img> or <link>) to capture and exfiltrate sensitive page data (CSRF tokens, session IDs, form values) by forcing the browser to include the subsequent content in a request URL.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

A specialized Codex CLI alias designed to check the operational status of the PUA agent or team. This tool reports current active states, corresponding Process IDs (PID), Time To Live (TTL), and identifies stale or inactive records. It is primarily used for system debugging and monitoring agent health via the command line.

This specialized agent allows applications to programmatically join, monitor, and leave live video conferences. It reads real-time events visible to the current identity, such as participants joining/leaving, speaking, chatting, and screen sharing. It is ideal for querying what happens during an active meeting or identifying the correct active meeting IDs. Note: It does not handle post-meeting tasks like transcriptions or recordings.