Skill UI

This wrapper provides a mechanism to integrate x402 payment walls into Node.js/Express APIs. It enforces micropayments (USDC on Base L2) for API access, enabling robust machine-to-machine (M2M) monetization. By acting as middleware, it requires valid payment signatures, ensuring that every API call is monetized and payments are liquidated atomically.

This skill provides a comprehensive playbook for testing the security of SAML-based Single Sign-On (SSO) solutions. It focuses on validating assertion trust by checking signature coverage, audience and recipient restrictions, handling of Assertion Consumer Service (ACS), and identifying potential XML parsing weaknesses or IdP/SP confusion flaws. Use this when evaluating enterprise authentication systems for critical security vulnerabilities.

A comprehensive guide to exploiting PHP's loose type checking (using '==') and type juggling mechanics. This skill is crucial for bypassing security controls like authentication checks, HMAC/signature validations, and token comparisons that fail to use strictly typed comparisons (===) or timing-safe functions (hash_equals). Includes techniques for magic hash collisions and PHP version delta analysis.