Skill UI

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill guides developers through critical breaking changes when upgrading OneNote integrations using the Microsoft Graph SDK. It details how to migrate from app-only to delegated authentication, replace decommissioned webhooks with polling, update deprecated search endpoints to OData filters, and upgrade the Graph SDK from v5 to v6. Essential for maintaining compatibility with modern Microsoft Graph APIs.

This utility addresses the lack of webhooks for OneNote resources. It implements an efficient change detection mechanism by performing timestamp-based polling and delta query comparisons against the Microsoft Graph API. It is essential for building real-time synchronization, change monitoring, or event-driven integrations for OneNote, while carefully managing API rate limits.

This skill provides a structured guide for setting up CI/CD pipelines to test Persona identity verification integrations. It demonstrates how to use sandbox API credentials, simulate webhooks, and run comprehensive integration tests. It is essential for developers ensuring the reliability and security of KYC/identity services before deployment.

This guide provides comprehensive solutions for common API errors encountered when integrating with Persona for identity verification (KYC). It covers critical issues including 401 unauthorized keys, 422 invalid templates, webhook signature mismatches, rate limit handling (429), and state management conflicts. Use this resource when debugging or optimizing automated identity validation workflows.

This guide provides a complete, end-to-end workflow for implementing Know Your Customer (KYC) identity verification using the Persona API. It details both backend implementation (creating inquiries, handling completion callbacks, resuming flows) and frontend integration (embedding the verification UI into web applications). Ideal for secure user onboarding and identity validation processes.

This skill is designed to collect comprehensive diagnostic information regarding Persona identity verification processes. It retrieves inquiry IDs, current status, API responses, and webhook delivery logs. It is essential for troubleshooting issues related to KYC and identity verification workflows, ensuring smooth API connectivity and data flow.

This guide provides a comprehensive workflow for developing and testing with Persona's identity verification services in a controlled sandbox environment. It details setting up local environment variables, tunneling webhooks using ngrok, creating test inquiries via API, and mocking API responses for robust unit and integration testing.

A comprehensive checklist and guide for deploying Persona identity verification features into a production environment. It covers prerequisites, API integration steps using Python examples, error handling (401, 429, 404), and critical post-deployment tasks like compliance review, webhook setup, and monitoring for secure, scalable identity solutions.

A comprehensive reference guide and implementation example for integrating Persona into your Know Your Customer (KYC) service flow. This skill covers the service architecture, inquiry lifecycle management, webhook-driven processing, and standard compliance patterns. Use it when building identity verification systems that require robust, multi-step verification processes using the Persona API.

This guide details best practices for securing Persona identity verification implementations. It covers critical security measures such as API key rotation, webhook HMAC verification, encrypting Personally Identifiable Information (PII) at rest, and maintaining comprehensive audit logs. Use this when integrating Persona into a production system requiring high data security and compliance.

This skill provides implementation patterns for integrating with the Procore platform using webhooks and the REST API. It is designed for automating core construction management workflows, such as handling project progress, managing RFIs (Requests for Information), and processing submittals. It covers API authentication (OAuth2) and robust error handling for enterprise-level project automation.