Skill UI

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

This comprehensive skill guides the user through the entire process of creating a deep, multi-layered AI persona (Soul.md). It helps define the identity, core rules, name, and visual prompts for agents designed for the OpenClaw platform. Users can initiate character creation via guided prompts or a random 'gacha' draw, ensuring a cohesive and compelling character profile.

This skill provides a comprehensive guide and code examples for designing robust and scalable Identity and Access Management (IAM) structures within Oracle Cloud Infrastructure (OCI). It covers establishing secure compartment hierarchies, understanding complex policy inheritance rules, implementing least-privilege access controls, and utilizing dynamic groups for service authentication, ensuring best practices for enterprise cloud governance.

This skill is designed to collect comprehensive diagnostic information regarding Persona identity verification processes. It retrieves inquiry IDs, current status, API responses, and webhook delivery logs. It is essential for troubleshooting issues related to KYC and identity verification workflows, ensuring smooth API connectivity and data flow.

A comprehensive TypeScript client wrapper for interacting with the Persona API. It simplifies identity verification workflows by providing methods for creating, retrieving, and paginating inquiries and verifications. Key features include implementing the Singleton design pattern, guaranteeing type-safe responses, and an advanced error classifier that intelligently handles retry logic (e.g., distinguishing between rate limits and invalid keys). Ideal for integrating reliable, production-grade KYC flows into applications.

A comprehensive utility designed to collect all necessary diagnostic evidence from a Salesforce organization. This debug bundle aggregates API limits, detailed debug logs, organization identity, API usage logs, and current Salesforce system status. It is crucial for preparing thorough support tickets or troubleshooting persistent, hard-to-reproduce issues.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

Analyzes any frontend codebase (React, Vue, Svelte, Angular, plain CSS, Tailwind) to document the complete design system. It extracts crucial visual elements—including color palettes, typography, spacing scales, and component patterns—directly from source files, without needing to build, render, or run the application. Ideal for design audits, visual language documentation, or migrating a project's identity into a design tool.

This solution designs and automates the entire Identity Governance and Lifecycle Management (IGA) program. It covers the Joiner-Mover-Leaver (JML) workflow, role mining, access provisioning, and remediation of orphaned accounts. It is essential for maintaining compliance (SOX, HIPAA, GDPR) by ensuring identity access consistency across multiple enterprise systems using an authoritative HR source.

A comprehensive tool for authorized red-team engagements, designed to map complex on-prem Active Directory and cloud Entra ID attack paths. It uses SharpHound and AzureHound to collect rich data, ingesting it into BloodHound CE for analysis using built-in queries and custom Cypher. Effectively identifies privilege escalation chains leading to domain or tenant compromise, especially in hybrid identity environments.

A framework-agnostic, builder-based SEO system designed for React and React Native-for-web applications. It centralizes site identity (title, description, OG tags) in a single source of truth, ensuring all metadata, canonical URLs, and structured data (JSON-LD, sitemap, robots.txt, RSS) are consistent, machine-readable, and automatically generated for every route.