Skill UI

This guide provides a deep dive into migrating from the deprecated Grammarly Text Editor SDK to the current, server-side REST APIs. It details the architectural shift from client-side embedding to modern API calls, covering how to implement Writing Score (v2), AI Detection (v1), and Plagiarism Detection (v1) using secure token authentication.

Provides comprehensive guidance for upgrading and migrating between different versions of the Grammarly API. This skill covers version detection, critical schema changes (e.g., score breakdown), migration checklists, and implementing robust rollback strategies for writing analysis, AI detection, and plagiarism checking.

A guide on handling asynchronous operations and event notifications for the Grammarly API. Since Grammarly does not provide native push webhooks, this skill demonstrates techniques for implementing polling mechanisms (e.g., for plagiarism detection) and building a robust event bus to reliably handle streamed results, such as score completion or AI content detection alerts.

Analyzes, plans, and executes upgrades for the Hex SDK, providing detailed detection of breaking changes, deprecations, and API version updates. Use this skill when migrating data pipelines or backend code to ensure compatibility with the latest Hex API standards.

A comprehensive solution for managing Personally Identifiable Information (PII) and ensuring compliance with global privacy regulations like GDPR and CCPA within Klaviyo. This skill guides developers on implementing critical functions, including the 'right to erasure' (profile deletion), handling Data Subject Access Requests (DSAR) by exporting all user data, and implementing PII detection and redaction for safe logging practices. It ensures that data handling processes meet legal standards.

A guide to building resilient software integrations when dealing with external APIs that lack formal versioning, changelogs, or guaranteed backward compatibility. Learn defensive coding patterns, implementing schema drift detection via CLI tools (curl, jq), using fallback field names, and executing gradual feature flag rollouts to maintain production stability.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This comprehensive guide serves as a reference for offensive security professionals developing custom x86/x64 shellcode. It details advanced concepts including Position-Independent Code (PIC), PEB traversal for API resolution, safe memory allocation (avoiding RWX), and sophisticated process injection methods (e.g., APC injection, threadless techniques). Learn how to bypass modern AV/EDR detection using advanced evasion techniques like API hashing, encryption, direct syscalls, and abusing PE structures.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.

This utility addresses the lack of webhooks for OneNote resources. It implements an efficient change detection mechanism by performing timestamp-based polling and delta query comparisons against the Microsoft Graph API. It is essential for building real-time synchronization, change monitoring, or event-driven integrations for OneNote, while carefully managing API rate limits.

This internal agent skill automates the complex process of determining the most likely owner or team for a bug cluster. It follows a strict 6-level precedence model, starting with cached overrides, and sequentially querying sources like Service Owners, Oncall status, CODEOWNERS, recent assignees, and committers. The process includes staleness detection and confidence scoring, providing highly accurate and auditable routing recommendations for internal development triage.