Skill UI

This module provides essential, standardized abstractions and hooks for managing navigation within a web administration panel. It includes components like LinkComponent and RouteLinkComponent, along with hooks such as useRouter and useRoute, allowing developers to easily structure routes, handle redirection, and manage client-side navigation state efficiently.

This module provides multiple standardized abstractions for interacting with the OpenSearch API. It includes dedicated abstractions for clients, factories, and operational contexts, allowing developers to implement robust, scalable, and type-safe interactions with OpenSearch within the webiny ecosystem. Use these patterns to ensure consistent data access regardless of the specific usage pattern.

This guide details how to integrate Auth0 as an external Identity Provider (IDP) for Webiny, replacing the default Cognito authentication. It involves creating an API config class to map Auth0's JWT claims to Webiny identities and implementing a React extension component. Users must set environment variables (AUTH0_ISSUER, AUTH0_CLIENT_ID) and register the necessary extensions for successful OIDC authentication flow.

This skill guides developers on integrating Okta as an external Identity Provider (IDP) for Webiny. It replaces default authentication methods (like Cognito) by utilizing the OpenID Connect (OIDC) standard. The process involves setting up an API configuration class to map Okta's JWT claims to Webiny identities, and creating a React extension component to wire the issuer URL, client ID, and configuration path, enabling seamless Single Sign-On (SSO) using Okta.

This guide provides comprehensive instructions for integrating the Wispr Flow API for advanced voice-to-text transcription. It details both WebSocket streaming (recommended for low latency) and REST API endpoints, covering authentication setup, API key configuration, and accessing short-lived client access tokens. Ideal for building real-time, voice-powered applications, such as code editors or dictation tools.

Build a rogue Wi‑Fi access point that mimics or outcompetes a legitimate network to attract client devices. Useful for security assessments involving captive portals, client coercion, and traffic interception after association.

Guides assessment of KRACK and FragAttacks against WPA2 clients, including official test scripts, likely vulnerable embedded and legacy devices, practical impact, detection, and reporting for modern penetration testing.

A professional methodology for writing penetration test and red team reports, covering executive summaries, technical findings, CVSS scoring, evidence handling, remediation tracking, retest notes, and delivery formats for clients and internal teams.

Methodology for passive Wi-Fi reconnaissance: choose compatible adapters, enable monitor mode, set regulatory domains, sweep 2.4/5/6 GHz bands, identify hidden SSIDs, clients, vendors, and encryption before active wireless attacks.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

This advanced playbook covers escalating prototype pollution into Remote Code Execution (RCE) and Cross-Site Scripting (XSS). It details exploitation techniques across various environments, including Node.js child_process, EJS, Pug, Handlebars, and client-side libraries like jQuery and Lodash. It is designed for security researchers and penetration testers to systematic locate and exploit deep merge sinks and framework gadgets.

This guide assists developers in building robust Model Context Protocol (MCP) servers and clients using C#/.NET. It specifically targets the stable 1.x NuGet packages, providing detailed instructions for configuring various transports (STDIO, Streamable HTTP), defining custom tools, prompts, and resources. It helps solve common integration issues like stale preview pinning, complex HTTP wiring, and structured content handling, ensuring production-ready, standard-compliant code.