Skill UI

This reference architecture provides a production-ready, layered structure for integrating external applications with Klaviyo. It outlines best practices for building robust marketing automation systems, including profile synchronization (bidirectional sync), event-driven webhook handlers, background job processing, and implementing middleware like rate limiters. Use this when designing new data pipelines, reviewing project structure, or establishing standardized data synchronization standards for email/SMS campaigns.

A comprehensive guide to setting up and processing Klaviyo webhooks. This skill covers creating webhook subscriptions via the API, implementing crucial HMAC-SHA256 signature verification for security, and building a robust event handler. Learn how to manage different topic types (e.g., profile updates, list changes) and ensure idempotency, making your application reliable for event-driven marketing integrations.

This skill provides comprehensive documentation and implementation guidance for setting up and handling MindTickle webhooks. It allows external applications to react in real-time to key user lifecycle events, such as course completion, quiz submissions, user provisioning, and progress updates. Use cases include syncing progress to HRIS/CRM (e.g., Salesforce), triggering automated alerts, or managing user access in downstream systems.

This guide provides comprehensive strategies for optimizing API usage and managing costs when integrating with Miro. It covers credit monitoring, advanced techniques like caching, server-side filtering, batching, and subscribing to webhooks. By implementing these best practices, developers can drastically reduce API call volume, stay within rate limits, and ensure highly efficient and cost-effective application development.

This skill provides comprehensive deployment scaffolding for Miro REST API v2 integrations. It manages the entire lifecycle, including setting up OAuth 2.0 authentication, handling incoming webhooks, and ensuring continuous health monitoring. It supports deployment across major cloud platforms like Vercel, Fly.io, and Google Cloud Run, simplifying complex multi-environment SaaS application setups.

A comprehensive guide for developers implementing secure integrations with the Miro REST API v2. This guide covers critical security best practices, including OAuth 2.0 scope minimization, robust token lifecycle management (refreshing tokens), verifying webhooks using signatures, and implementing client secret rotation protocols. Essential for building reliable and secure SaaS applications connected to Miro.

Implements comprehensive webhook handling for Miro boards. This solution allows external applications to subscribe to real-time events (create, update, delete) occurring on specific boards. It covers board subscription creation, event payload parsing, signature verification, and robust asynchronous event processing using TypeScript/Express.js, enabling seamless integration with external systems.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

This comprehensive checklist guides penetration testers through discovering Insecure Direct Object References (IDOR). It covers techniques like object ID enumeration, horizontal and vertical privilege escalation, and parameter manipulation. Use it for web application pentests and bug bounty hunting to identify broken access control vulnerabilities.

This comprehensive checklist guides users through identifying and exploiting open redirect vulnerabilities in web applications. It covers parameter identification, advanced bypass techniques (e.g., URL encoding, CRLF injection), and chaining the vulnerability with other flaws like OAuth or SSRF. Ideal for web application penetration testing and bug bounty hunting.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.