Skill UI

A comprehensive workflow for discovering, integrating, and utilizing third-party APIs and SDKs. This skill guides the process by first detecting the project language, ensuring necessary guidelines and skills are present, systematically fetching API details, and providing structured guidance on authentication, model usage, and endpoint implementation. It tracks integration progress by recording specific development milestones (e.g., SDK setup, first call made).

A comprehensive guide to setting up a fast, reproducible local development environment for BambooHR integrations. This workflow incorporates hot reloading, API mocking (using MSW), and robust unit/integration testing. It allows developers to establish a rapid, isolated, and stable iteration cycle for building or testing third-party HR platform connections.

A comprehensive guide to implementing secure integration practices for Linktree APIs. Covers critical topics including secure secret management, robust webhook signature verification (HMAC-SHA256), input sanitization against XSS, and data redaction of Personally Identifiable Information (PII). Essential for developing resilient and secure third-party integrations.

This guide demonstrates how to set up a secure and robust webhook endpoint to process identity verification events from Persona. It covers essential security practices, including HMAC signature verification using TypeScript and Express, handling critical KYC lifecycle events (like inquiry approval/declination), and implementing idempotent processing to prevent data duplication. Ideal for integrating third-party identity services into a web application.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This skill provides an end-to-end solution to transform existing REST APIs, defined by OpenAPI or Swagger specifications, into functional MCP servers. It maps every API operation to a dedicated, callable LLM tool, automatically generating robust parameter schemas (Zod) and handling authentication wiring. Use this to expose internal or third-party APIs to LLMs, providing a complete workflow from spec ingestion to local testing and cloud deployment.

A comprehensive resource containing official, managed integration examples for popular third-party services (Stripe, OpenAI, Supabase, etc.). This library provides canonical patterns for connecting external APIs into an Expo application. Users can utilize it in two primary ways: adapting the pattern into an existing project (most common) or scaffolding a new greenfield application.

This comprehensive tool scans all project dependencies against databases of known CVEs (Common Vulnerabilities and Exposures) and security vulnerabilities. It is essential for conducting thorough security audits of third-party packages, ensuring code quality before major releases, or responding to specific security advisories. It provides actionable reports categorized by severity.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.