Skill UI

This comprehensive guide provides step-by-step instructions for upgrading Snowflake drivers (Node.js and Python) and managing complex data warehouse migrations. It covers prerequisite checks, reviewing release notes, handling common API breaking changes (e.g., cursor types, async connections), and performing post-migration validation to ensure application stability during platform or edition upgrades.

This guide demonstrates how to set up a complete development environment entirely within a web browser using the WebContainer API. It covers mounting a virtual file system, installing Node.js dependencies via npm, and starting a local dev server (like Express) without needing a dedicated backend server. It is ideal for learning WebContainers, building browser-based IDEs, or prototyping Node.js applications client-side.

This guide details how to install and configure the WebContainer API, enabling client-side Node.js execution directly in the browser. It also provides instructions for integrating the StackBlitz SDK, which is used for embedding highly interactive code editors into web applications. The guide covers necessary dependency installations, code examples, and crucial HTTP header configuration (COOP/COEP) required for cross-origin isolation and secure operation.

The official SDK for interacting with the Webiny Headless CMS and File Manager from external applications (Next.js, Vue, Node.js). It provides a robust TypeScript interface for performing CRUD operations (list, get, create, update, publish), advanced filtering, sorting, and ensuring type safety across complex content models. Use this when building frontends or backends that need to consume Webiny content data.

This wrapper provides a mechanism to integrate x402 payment walls into Node.js/Express APIs. It enforces micropayments (USDC on Base L2) for API access, enabling robust machine-to-machine (M2M) monetization. By acting as middleware, it requires valid payment signatures, ensuring that every API call is monetized and payments are liquidated atomically.

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

This advanced playbook covers escalating prototype pollution into Remote Code Execution (RCE) and Cross-Site Scripting (XSS). It details exploitation techniques across various environments, including Node.js child_process, EJS, Pug, Handlebars, and client-side libraries like jQuery and Lodash. It is designed for security researchers and penetration testers to systematic locate and exploit deep merge sinks and framework gadgets.

This skill provides a mechanism to execute TypeScript scripts using tsx, enabling fetching and streaming responses from external HTTP endpoints. It is designed for users who need a lightweight Node.js helper utility to manage simple network API calls, making it ideal for rapid integration and data fetching tasks.

Flox is a declarative, Nix-based environment manager designed to create perfectly reproducible development environments. It handles system-level dependencies (like compilers, databases, and native libraries) and ensures that complex toolchains across multiple languages (Python, Node.js, Go, etc.) function identically across macOS and Linux. Ideal for solving 'works on my machine' issues and onboarding new team members instantly.

A powerful PreToolUse hook designed to act as a safety net during code writing sessions. It automatically scans both file paths and content for 12 common security anti-patterns, including SQL injection, XSS, command injection (Node.js/Python), and unsafe deserialization. It blocks the writing operation and provides immediate warnings, ensuring adherence to secure coding practices when handling sensitive code like authentication or payment logic.

A comprehensive guide covering scalable backend architecture patterns, including Repository, Service, and Middleware design. It details best practices for building robust APIs using Node.js, Express, and Next.js. Topics covered include RESTful API structuring, database query optimization (preventing N+1 issues), implementing database transactions, and integrating caching strategies like Redis. This guide is essential for developing high-performance, maintainable server-side applications.