Skill UI

This guide provides comprehensive implementation patterns for integrating with the Podium API. It covers best practices for managing business messaging, collecting reviews, and processing payments via a robust REST API framework. Key features include OAuth2 authentication setup, robust error handling (e.g., rate limiting, token refresh), and structured API calls, ensuring reliable communication workflows across your application.

This guide provides implementation patterns for secure integration with the Podium API using REST API calls. It focuses on establishing robust connections with OAuth2 authentication for managing core business functions, including messaging, retrieving customer reviews, and processing payments. It also details essential error handling strategies.

This skill provides implementation patterns for integrating with the Podium API, a robust platform for business messaging, review management, and payment processing. It demonstrates best practices for using REST APIs with OAuth2 authentication. Users can use this guide to connect their systems, handle complex operations like fetching location data, and implement critical error handling and retry logic for stability.

This guide demonstrates how to implement a robust webhook handler for the Podium platform. Developers can process real-time business events—including incoming customer messages, new reviews, and completed payments—by setting up event routing and ensuring idempotent processing. Essential for integrating critical communication and transaction data into a backend system.

This guide outlines a sophisticated development workflow using dedicated subagents for each independent task within a plan. It mandates a two-stage review process—first for specification compliance, then for code quality—ensuring highly reliable, high-quality, and rapidly iterative development cycles while maintaining strict context isolation.

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.

This skill automates the process of making any codebase ready for advanced AI assistance. It analyzes your repository structure, review patterns, and stack details to generate essential configuration files, including AGENTS.md, copilot-instructions.md, CI workflows, and issue templates. Use this when setting up a new project or integrating advanced AI tooling into your existing development workflow.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This pipeline orchestrates the process of adapting a highly polished, existing academic paper for resubmission to a new conference or journal. It specializes in text-only microedits, integrating prior reviewer feedback (review corpus) while strictly forbidding new experiments, new citations, or major structural changes. It is designed for high-stakes, time-constrained resubmissions.

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

A structured methodology for validating non-trivial decisions by subjecting them to an adversarial, fresh-context review. This process is crucial when correctness is paramount—such as in production, security-sensitive logic, or complex architecture—by forcing a skeptical examination that aims to disprove assumptions rather than simply approve them.