Skill UI

This guide provides essential security and technical guidance for integrating Wispr Flow's voice-to-text API. It covers best practices for authentication (API keys, access tokens), utilizing streaming methods like WebSockets, handling common API errors, and optimizing context awareness for high-accuracy transcription in various applications.

This guide provides detailed instructions on configuring API access for Workhuman, utilizing the OAuth 2.0 protocol. It is essential for integrating external Human Resources Information Systems (HRIS) or building custom workflows for employee recognition and rewards management. Users will learn how to obtain access tokens and programmatically interact with Workhuman's social recognition features.

A comprehensive playbook for security testing APIs relying on JWT, bearer tokens, or API keys. It covers token validation weaknesses (e.g., 'alg:none', RS256 confusion), claim misuse, header spoofing, rate limit bypass, and mass assignment vulnerabilities. Ideal for penetration testers assessing authentication boundaries.

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

A powerful technique used when full XSS is blocked by CSP, sanitizers, or WAFs, but HTML injection is possible. It leverages unclosed HTML tags (like <img> or <link>) to capture and exfiltrate sensitive page data (CSRF tokens, session IDs, form values) by forcing the browser to include the subsequent content in a request URL.

An expert playbook detailing advanced attacks against JWT and OAuth 2.0 tokens. Covers cryptographic weaknesses like alg:none, key confusion (RS256 to HS256), and header injection (kid, jku). It also addresses critical OAuth flow abuses, such as missing state parameters, account takeover, and token leakage, essential for robust application security testing.

This expert simulates an experienced design system author for Ant Design, specializing in structured, enterprise-focused, data-dense web applications. It generates comprehensive, implementation-ready guidelines covering design tokens, component anatomy, interaction states, accessibility requirements (WCAG 2.2 AA), and content standards, ensuring maximal clarity and consistency for development and design teams.

This skill provides comprehensive, expert-level guidelines for authoring robust design systems. It covers foundational style tokens, strict accessibility requirements (WCAG 2.2 AA), and detailed component anatomy (states, variants, interaction behavior). Use this to create implementation-ready documentation that ensures visual consistency and optimal user experience across all digital platforms.

A comprehensive technical and aesthetic guide for building a modern, high-contrast user interface. This system defines foundational constraints, including color tokens, typography scales, and spacing grids, while rigorously ensuring WCAG 2.2 AA accessibility standards. It provides structured rules for component states, interactions, and development workflow to ensure consistency and superior user experience.

An expert guide for creating comprehensive, implementation-ready design system documentation. This skill generates structured guidelines covering design tokens, typography, spacing, component anatomy, interaction states, and WCAG accessibility criteria, ensuring consistency and quality for developers and designers.

This skill functions as an expert guide for creating comprehensive, implementation-ready design systems. It covers foundational elements like color tokens, typography, and spacing, while strictly adhering to accessibility standards (WCAG 2.2 AA) and defining structured workflows for designers and engineers. Ideal for establishing robust, scalable, and aesthetically premium UI guidelines.