Skill UI

This comprehensive guide teaches how to use httpYac in VSCode to convert API documentation (like Swagger or Postman collections) into robust, executable .http files. It provides advanced workflow guidance for implementing complex authentication schemes (OAuth2, Bearer), managing multi-environment configurations, chaining requests using response data, and integrating testing workflows with CI/CD pipelines for professional-grade API automation.

A comprehensive guide to setting up continuous integration and continuous deployment (CI/CD) pipelines for Webflow Data API v2 integrations using GitHub Actions. This setup automates unit testing (mocked SDK), robust integration testing with real API tokens, CMS schema validation, and reliable publish-on-merge workflows, ensuring code quality and consistency in your Webflow projects.

This script provides a minimal working example for interacting with the Webflow Data API v2. It demonstrates the core operations, including listing sites, reading CMS collections, fetching existing CMS items (draft/live), and creating new content. Use this guide when starting a new Webflow integration or testing your basic API setup.

A comprehensive guide to configuring a fast, reproducible local development workflow for Webflow Data API v2 integrations. This setup includes TypeScript, hot reloading, Vitest mocking, and ngrok webhook tunneling, enabling developers to establish a rapid iteration cycle for seamless Webflow development and testing.

This comprehensive guide serves as a decision flowchart for developers using Claude Code. It details when to use specific slash commands (/plan, /compact, /loop), select specialized agents (planner, code-reviewer, build-error-resolver), or invoke workflow skills (e2e-testing, tdd-workflow). It helps users select the optimal tool combination for complex tasks across the entire software development lifecycle, including feature planning, bug fixing, testing, and architectural design.

Squirrel is an advanced, full-cycle AI coding skill designed to guide software development from concept to production. It automatically detects the current project state (greenfield, in-progress, or mature) and adapts an 8-phase engineering pipeline. This comprehensive workflow covers planning, building, rigorous testing, bug hunting, code polishing, documentation, and deployment readiness, ensuring high-quality, maintainable results.

A systematic, multi-phase guide for tackling hard bugs and performance regressions. It mandates building a robust feedback loop (e.g., failing tests, harnesses), formulating falsifiable hypotheses, targeted instrumentation, and rigorous regression testing. This methodology ensures that debugging efforts are structured, efficient, and highly reproducible, making it ideal for complex software defects.

A deep-dive session designed to stress-test a technical plan against an existing domain model. This process forces the user to resolve ambiguities, sharpen terminology, and validate decisions by cross-referencing code and existing documentation (CONTEXT.md, ADRs). It ensures architectural rigor and completeness before implementation.

Guides assessment of KRACK and FragAttacks against WPA2 clients, including official test scripts, likely vulnerable embedded and legacy devices, practical impact, detection, and reporting for modern penetration testing.

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

This comprehensive playbook guides security testers through deep API authorization checks, focusing specifically on BOLA (Broken Object Level Authorization) and BFLA (Broken Function Level Authorization). Use this skill to test scenarios where object identifiers, nested resources, or privileged functions are exposed, ensuring thorough checks for mass assignment and privilege escalation.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.