Skill UI

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

This comprehensive guide details advanced strategies for managing time-series data and data retention in vector databases (like Qdrant). It is designed for scenarios where only recent data is relevant (e.g., social media feeds, news articles). Three core methods are presented: Shard Rotation (recommended for natural time boundaries), Collection Rotation (for per-period configuration needs), and Filter-and-Delete (for simple cleanup). The guide also covers hot/cold tiering to optimize performance.

Configures a robust local development workflow for SalesLoft integrations. This guide teaches developers how to implement API mocking and environment separation using tools like Vitest and Axios. It allows for safe, fast, and reliable unit and integration testing without relying on an official sandbox environment, ensuring optimal development cycles for SaaS products.

This guide provides essential security and implementation guidance for automating TechSmith's screen capture (Snagit) and video editing (Camtasia) workflows. It covers using the Snagit COM API, best practices for batch rendering with Camtasia CLI, and technical details for scripting in PowerShell and Python using pywin32. It also addresses common error handling scenarios like permission issues and file locking, ensuring robust automation.

This guide provides deep-dive patterns and best practices for migrating enterprise data into Veeva Vault. It is essential for developers implementing advanced, compliant, and regulated workflows within the life sciences sector. Key considerations include validating API changes against strict compliance requirements, utilizing VQL for efficient data retrieval, and handling complex error scenarios during migration.

Provides comprehensive guidelines for integrating the Wispr Flow voice-to-text API into development environments. This skill covers both low-latency WebSocket streaming and simpler REST endpoint usage. It is essential for building voice-powered applications, including real-time dictation, command-line interactions, and context-aware code transcription across multiple platforms (Mac, Windows, iOS).

A comprehensive guide for migrating and integrating with the Wispr Flow voice-to-text API. This skill details best practices for both WebSocket (low-latency streaming) and REST API methods. It covers authentication, optimal audio formatting (16kHz mono PCM), context awareness for specialized jargon (e.g., code), and robust error handling across multiple platforms (Mac, iOS, browser).

XcodeBuildMCP is a unified skill set designed to streamline the entire mobile and desktop development lifecycle. It replaces raw command-line tools like xcodebuild, xcrun, and simctl, providing structured workflows for iOS, macOS, watchOS, tvOS, and visionOS. Capabilities include project discovery, managing simulator and physical device workflows, advanced UI automation (gestures, view inspection), robust logging, and deep debugging using LLDB. It simplifies complex build, test, and run operations across multiple platforms.

The official skill for the XcodeBuildMCP CLI, providing a unified interface for complex Apple development tasks. It streamlines build, test, run, debug, and UI automation across iOS, macOS, watchOS, tvOS, and visionOS. Use this tool to simplify multi-stage workflows and manage project lifecycles without relying on raw, complex xcodebuild commands.

This utility provides comprehensive capabilities for viewing, creating, uploading, editing, and comparing Markdown files stored in the cloud drive. It is designed for scenarios requiring local content manipulation, such as creating new files, fetching existing content, performing localized text patching (regex replacement), comparing version differences, or overwriting content. Note that it specifically handles structured Markdown files, not docx conversions, and defers cloud space management operations (like searching, moving, or permissions) to other dedicated skills.

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.