Skill UI

A comprehensive guide for developing professional Telegram bots using the official Bot API. It covers the entire setup process, including BotFather configuration, message handling, webhooks, inline keyboards, and provides ready-to-use boilerplate code for both Node.js and Python. Ideal for creating robust, automated Telegram solutions.

Offers testing guidance covering TDD workflows, unit/integration/E2E organization, framework support, mocking strategy, and coverage to help teams deliver reliable, well-structured test suites.

A comprehensive toolkit for integrating with the official WhatsApp Business Cloud API (Meta). Supports message sending, template management, webhooks (HMAC-SHA256), and advanced customer service automation. Provides ready-to-use boilerplates in Node.js and Python, facilitating scalable and professional communication solutions.

A comprehensive engineering stack for designing and implementing robust, production-grade payment gateways for Software-as-a-Service (SaaS) platforms targeting the Pakistani market. It covers integrating major local providers like JazzCash and Easypaisa, handling complex payment flows (PKR billing, webhooks, idempotency), and performing essential financial reconciliation and auditing processes. This guide ensures high correctness and reliability in B2B/SaaS billing operations in Pakistan.

A comprehensive set of architectural patterns for building robust and maintainable HTTP servers using Kotlin Coroutines and the Ktor framework. It covers essential topics including REST routing DSL, plugin configuration (Authentication, CORS, StatusPages), Dependency Injection (Koin), serialization, WebSockets, and integration testing using testApplication.

This skill provides comprehensive integration with the X (Twitter) API, enabling users to programmatically post, read, search, and analyze tweets and timelines. It covers essential authentication patterns (OAuth 2.0 and OAuth 1.0a), rate limit handling, and best practices for building robust X integrations and bots.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

Leverage Certificate Transparency (CT) logs via crt.sh and Certstream to proactively monitor for suspicious SSL/TLS certificates. This skill helps detect lookalike domains, unauthorized certificate issuance, and potential phishing infrastructure targeting your organization before attacks launch. Includes querying logic and threat intelligence integration.

This skill guides the creation of automated workflows for enriching raw Indicators of Compromise (IOCs) with multi-source threat intelligence context. It is designed for integration into SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR) or Python pipelines. By automatically querying multiple sources like VirusTotal, AbuseIPDB, and MISP, it significantly reduces analyst mean time to triage (MTTT) and standardizes the resulting threat context and confidence scoring.

Guides security architects through designing and deploying a continuous CSPM program across AWS, Azure, and GCP, covering tool selection, policy baselines, automation, and SOC integration to monitor misconfigurations and prioritize remediation.

This skill provides a comprehensive framework for building automated pipelines that ingest, normalize, and operationalize threat intelligence (TI). It connects diverse sources—including STIX/TAXII feeds, open-source feeds (e.g., Abuse.ch), and commercial TI platforms—into SIEM and security tools. Use this when SOC teams need to automate the entire lifecycle of IOC ingestion, scoring, and real-time matching against network telemetry.

This guide details how to implement comprehensive API security testing using the 42Crunch platform. It performs static audits of OpenAPI specifications (API Audit) and dynamic vulnerability scanning (Conformance Scan) against live APIs. Supports integration into CI/CD pipelines to proactively discover OWASP API Top 10 vulnerabilities, enabling a Shift-Left security approach.