Skill UI

This comprehensive guide details how to implement centralized security controls at the API gateway layer. It covers critical functionalities such as JWT authentication enforcement, advanced rate limiting, request/response validation against OpenAPI specs, and integrating Web Application Firewalls (WAF). The process is applicable across major platforms like Kong, AWS API Gateway, and Azure APIM, ensuring robust defense in depth for microservices architecture.

This guide details methodologies for identifying and exploiting XML External Entity (XXE) injection vulnerabilities in web applications. It covers basic file retrieval, blind XXE detection using out-of-band techniques, and data exfiltration, all critical steps during authorized penetration testing of XML-consuming APIs and services.

Hono is a minimal and ultrafast web framework built entirely on Web Standards (Request/Response/fetch). It allows developers to build high-performance APIs and full-stack applications that run seamlessly across multiple environments, including Cloudflare Workers, Deno, Bun, and Node.js. It is ideal for edge deployment, Backend for Frontend (BFF) layers, and type-safe backend services.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

This guide provides a comprehensive, step-by-step process to scaffold a modern Spring Boot application using Kotlin. It covers downloading the template, configuring dependencies (including SpringDoc and ArchUnit), and setting up complex polyglot environments using Docker Compose. Supports PostgreSQL, MongoDB, Redis, and WebFlux reactive programming.

This tool provides comprehensive automation capabilities for managing cloud infrastructure on the Render platform via Rube MCP. Users can list, filter, and browse various services (web services, static sites, etc.), manually trigger new deployments, and continuously monitor the deployment status (e.g., checking for 'live' status or catching 'build_failed' errors). It is essential for streamlining CI/CD pipelines, managing projects, and ensuring reliable, automated service updates without manual intervention.

This comprehensive guide outlines essential security best practices for integrating with Adobe APIs. It covers securing OAuth credentials, implementing least-privilege scoping, managing zero-downtime credential rotation, and verifying I/O Events webhook signatures using cryptographic methods like RSA-SHA256. Essential for building secure, production-ready applications connected to Adobe services.

A comprehensive guide to the three primary architecture patterns for integrating with Figma: CLI scripts, Webhook services, and dedicated plugins. This resource helps developers select the optimal pattern (REST vs. Plugin API) based on whether the use case requires real-time event handling, local automation, or in-editor component interaction. Ideal for planning robust Figma-connected applications like design token synchronization or linting.

This skill provides instructions for deploying Flexport logistics integrations across various cloud platforms, including Vercel, Fly.io, and Google Cloud Run. It is essential for setting up reliable, always-on webhook receivers, shipment tracking dashboards, and background workers necessary for comprehensive supply chain automation services in a production environment.

This skill guides developers on implementing event-driven logic for Hex CI/CD workflows. Since Hex does not provide native push webhooks, this method demonstrates how to poll run statuses using callbacks (e.g., TypeScript) to reliably detect task completion or failure. It is essential for integrating Hex pipelines with external services like Slack or custom notification systems.

This comprehensive guide details the implementation of secure, event-driven webhooks for Adobe I/O Events. It covers the complete lifecycle, including programmatic webhook registration, handling the challenge-response handshake, implementing robust RSA-SHA256 signature verification, and routing incoming events from services like Creative Cloud and Experience Platform. Essential for building mission-critical, integrated backend systems within the Adobe ecosystem.

This comprehensive guide covers the full lifecycle of Apify Actors, enabling deployment from local environments to production platforms. Learn to trigger scraping tasks via APIs (e.g., Next.js routes), consume structured data, and handle results asynchronously using webhooks in frameworks like Express.js. Ideal for building robust, data-driven web services and automating data pipelines.