Skill UI

Programmatically manages advanced elements on Miro boards using the REST API v2. Functions include creating connectors, uploading images (from URL or Base64), embedding external content (like videos/URLs), managing custom App Cards, and adding documents. Ideal for building complex, automated, and visually rich workflows, architecture diagrams, and collaborative dashboards.

This skill provides a comprehensive guide to setting up a robust local development workflow for building Miro integrations. It encompasses hot reloading for rapid iteration, structured unit and integration testing using Vitest, and configuring ngrok tunneling for simulating real-world webhooks and interacting with the Miro REST API v2.

This comprehensive guide assists developers migrating their Miro integrations from REST API v1 to v2. It details key breaking changes, such as 'Widget' becoming 'Item' and 'Line' becoming 'Connector,' provides updated endpoint maps, and offers step-by-step instructions for upgrading the `@mirohq/miro-api` SDK and adapting request/response payloads. Use this resource when updating your integration to handle the latest Miro platform standards and data structures.

Implements comprehensive webhook handling for Miro boards. This solution allows external applications to subscribe to real-time events (create, update, delete) occurring on specific boards. It covers board subscription creation, event payload parsing, signature verification, and robust asynchronous event processing using TypeScript/Express.js, enabling seamless integration with external systems.

This skill manages the end-to-end Navan expense reporting workflow. It allows users to retrieve detailed transaction data via API, automate multi-level approval workflows based on configured policies, and map expenses to specific General Ledger (GL) codes. It is designed to generate journal entry payloads for seamless synchronization with major accounting systems like NetSuite, Xero, and QuickBooks, streamlining financial reconciliation.

Use this comprehensive bundle to systematically collect diagnostic data from Navan API integrations. It captures critical information including OAuth token details, full API request/response payloads, network connectivity metrics, and local environment state. This tool is essential for developers and integrators needing to perform deep troubleshooting and pinpoint complex API failures.

This skill provides a comprehensive framework for setting up and managing real-time webhooks from the Navan platform. It covers registering callback URLs, verifying payload signatures using HMAC-SHA256, and implementing idempotent event processing. It routes and handles key events related to the booking lifecycle, expense workflow, and travel disruptions, enabling seamless integration with internal systems.

A comprehensive guide for performing end-to-end (E2E) and integration testing on the Nexu → OpenClaw gateway stack. It details the architectural constraints and viable testing methods, emphasizing the use of Vitest for reliable internal function testing (e.g., skill snapshotting, session store logic). Use this when verifying core gateway fixes, testing skill loading after restarts, or simulating complex operational scenarios.

Provides advanced patterns for high-volume Notion API interactions. Learn how to manage rate limits (3 req/sec) using worker queues, implement parallel requests with p-queue, and efficiently paginate massive databases (100K+ records) using incremental sync and chunked processing. Essential for building robust, scalable Notion automation tools.

This guide provides a comprehensive operational checklist for exploit development. It covers the entire lifecycle, from initial bug identification and vulnerability analysis (e.g., stack overflow, UAF) to payload development, mitigation bypass (ASLR, DEP, CFG), and reliable weaponization. Essential for security researchers developing Proof-of-Concept exploits and establishing a professional exploit development environment.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

A comprehensive methodology for conducting deep security assessments and penetration tests against GraphQL APIs. This guide covers the entire attack lifecycle, including endpoint discovery, blind schema reconstruction, authentication/authorization bypass, SQL/NoSQL injection, Denial of Service (DoS) via depth bombs, and abusing advanced features like file uploads and subscriptions. It provides actionable steps and tool guidance for professional security researchers and ethical hackers.