Skill UI

This skill details techniques for exploiting PHP's type juggling vulnerabilities, primarily caused by loose (==) comparison operators. It demonstrates how attackers can bypass authentication mechanisms, defeat magic hash function verifications, and manipulate application logic through controlled type coercion when testing web applications. Ideal for authorized security penetration testing.

A comprehensive security tool designed to simulate and detect critical software supply chain attacks. It identifies risks such as typosquatting via Levenshtein distance, dependency confusion against private registries, package integrity failures through SHA-256 hash verification, and known vulnerabilities using pip-audit. Essential for security auditing and assessing project dependency risk.

This comprehensive guide outlines essential security best practices for integrating with Intercom. It covers secure token storage, robust webhook signature verification (X-Hub-Signature), implementing Identity Verification, and adhering to least-privilege OAuth scopes. Use this guide when building secure, production-ready applications that interact with Intercom APIs.