Skill UI

A comprehensive guide for configuring and integrating the Cohere API v2 across development, staging, and production environments. This pattern ensures environment-specific settings—including API keys, model selections, token limits, and caching strategies—are correctly applied. It covers best practices for secure secret management using tools like Vault, AWS Secrets Manager, and GCP Secret Manager, ensuring robust and scalable deployments.

This guide provides a deep dive into migrating machine learning workloads, including inference services and training pipelines, from major hyperscalers (AWS, GCP, Azure) to the CoreWeave GPU cloud. It covers cost comparisons, containerization, Kubernetes YAML adaptation, and a phased deployment strategy, helping users ensure a smooth, cost-effective, and optimized transition.

A comprehensive security tool designed for AI environments (OpenClaw). It functions as an 'antivirus' for AI skills, performing deep audits, scanning skills before installation, and running full security health checks. Its primary goal is to detect vulnerabilities, prevent data leaks, and mitigate privacy risks, ensuring the integrity and safety of the AI workspace.

This guide details best practices for setting up and managing HubSpot integrations across development, staging, and production environments. It emphasizes the critical use of environment-specific access tokens, robust secret management (Vault, AWS/GCP SM), and implementing safety guards within CI/CD pipelines to ensure data integrity and prevent cross-environment deployment errors.

This guide provides a comprehensive strategy for configuring Klaviyo across development, staging, and production environments. It covers best practices for using separate API keys, implementing robust environment detection logic (like reading NODE_ENV), and utilizing secret management solutions (AWS/GCP/Vault). Crucially, it teaches how to implement 'guards' to prevent accidental real-world actions, such as sending live emails or deleting data, in non-production environments, ensuring data integrity and smooth CI/CD deployment.

This skill provides a robust solution for configuring the Miro REST API v2 across development, staging, and production environments. It details best practices for achieving environment isolation by utilizing separate OAuth applications, dedicated board IDs, and implementing enterprise-grade secret management (e.g., AWS Secrets Manager, Vault). This setup prevents development activities from accidentally impacting critical production data.

This guide details how to securely configure Notion integrations for separate development, staging, and production environments. It emphasizes using environment-aware client factories, dedicated tokens, and integrating with robust secret managers (AWS Secrets Manager, GCP Secret Manager, HashiCorp Vault) to ensure strict data isolation and adhere to least-privilege principles across all deployment tiers.

This comprehensive checklist guides thorough security testing of OAuth 2.0 and OpenID Connect (OIDC) protocols. It covers advanced vulnerabilities such as authorization code interception, PKCE bypass, CSRF flaws, and improper scope validation. The methodology emphasizes modern industry standards like FAPI (DPoP, JAR, PAR), making it essential for penetration testers and security researchers assessing web application integrity and API security.

This comprehensive checklist guides users through identifying and exploiting open redirect vulnerabilities in web applications. It covers parameter identification, advanced bypass techniques (e.g., URL encoding, CRLF injection), and chaining the vulnerability with other flaws like OAuth or SSRF. Ideal for web application penetration testing and bug bounty hunting.

This skill provides a comprehensive operational checklist for identifying and exploiting HTTP Parameter Pollution (HPP) vulnerabilities. It details how various web technologies (ASP.NET, PHP, Python, etc.) handle duplicate parameters differently (e.g., first-wins, last-wins, concatenation). Use this skill during penetration testing to discover flaws in parameter parsing, which can lead to bypassing WAFs, performing logic manipulation, or achieving unauthorized access.

A comprehensive methodology and checklist for identifying and exploiting race conditions (TOCTOU) in web applications. It guides users to find timing windows, detect vulnerabilities like double-spend or rate limit bypass, and exploit concurrent request flaws in state-changing business logic. Essential for penetration testing and bug bounty hunting.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.