Skill UI

A comprehensive guide for integrating the Algolia JavaScript v5 client into Node.js/TypeScript projects. It covers proper installation, secure management of Application IDs and API keys (Admin vs. Search-Only), and best practices for client initialization, ensuring robust and safe search functionality implementation.

A comprehensive diagnostic reference for common Bright Data proxy and API errors, including 407, 502, SSL Certificate errors, and rate limit issues. This guide provides specific causes, detailed fixes, and command-line solutions (cURL, Python, JavaScript) to ensure uninterrupted web scraping and API integration.

This comprehensive guide demonstrates how to programmatically interact with Apple Notes on macOS. It covers essential functions like creating new notes, listing all notes, reading specific content, searching by keywords, organizing notes into folders, and deleting entries. It primarily utilizes JXA (JavaScript for Automation) and AppleScript via the command line (osascript). Ideal for developers learning native macOS automation or integrating Notes management into larger workflows.

Provides a robust, iterative development workflow for automating Apple Notes using JXA (JavaScript for AppleScript). This setup includes file-watching hot-reloading for rapid testing and helper functions to simulate note CRUD operations, significantly speeding up the development process.

This guide provides a comprehensive workflow for deploying Algolia-powered search applications to various cloud platforms, including Vercel, Fly.io, and Google Cloud Run. It covers best practices for API key separation (Admin vs. Search-Only), setting up environment variables, and implementing both backend API routes and advanced frontend components using React InstantSearch or vanilla JavaScript.

This guide details how to automate Apple Notes on macOS, providing a solution for applications lacking a direct REST API. It offers comprehensive instructions on setting up necessary system accessibility permissions and utilizing advanced scripting technologies, including AppleScript, JavaScript for Automation (JXA), and Shortcuts. Use cases cover advanced note management, batch processing, and integrating Notes into larger automation workflows.

This guide provides techniques to optimize Grammarly API interactions, focusing on reducing latency and improving throughput. Learn how to implement efficient caching strategies (like LRU cache) for repeated score checks and how to execute multiple API calls in parallel using Promise.all. Use this when experiencing slow response times or needing cost/performance improvements in Grammarly integrations.

This skill provides a comprehensive guide for developers on performing fundamental blockchain queries using QuickNode's RPC infrastructure. It demonstrates how to retrieve the current block number, check ETH balances for specific addresses, read data from ERC-20 smart contracts, and fetch transaction receipts. It is essential for initial Web3 integration and blockchain development projects using JavaScript/TypeScript.

A powerful utility that converts Markdown (`.md`) files into richly formatted Word (`.docx`) documents. Built using pure JavaScript, it requires no external dependencies like Pandoc or LibreOffice. Features include automatic generation of title pages (from YAML front-matter), dynamic table of contents, and accurate embedding of PNG images, making it ideal for technical documentation and reports.

A powerful technique used when full XSS is blocked by CSP, sanitizers, or WAFs, but HTML injection is possible. It leverages unclosed HTML tags (like <img> or <link>) to capture and exfiltrate sensitive page data (CSRF tokens, session IDs, form values) by forcing the browser to include the subsequent content in a request URL.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.