Skill UI

A comprehensive guide for performing end-to-end (E2E) and integration testing on the Nexu → OpenClaw gateway stack. It details the architectural constraints and viable testing methods, emphasizing the use of Vitest for reliable internal function testing (e.g., skill snapshotting, session store logic). Use this when verifying core gateway fixes, testing skill loading after restarts, or simulating complex operational scenarios.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

A comprehensive checklist and methodology for testing Cross-Site Scripting (XSS) vulnerabilities. Covers all major types, including Stored, Reflected, DOM, and Blind XSS, along with advanced techniques like CSP bypass, polyglot payloads, and event handler injection. Essential for web application security testing and bug bounty hunting to identify and mitigate malicious script injection risks.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This guide provides comprehensive methods for load testing and capacity planning specifically for Salesforce integrations. It walks users through calculating API limit budgets, running high-volume performance tests using tools like k6, and optimizing Bulk API throughput. Use this when scaling complex, high-volume, or mission-critical Salesforce processes.

This guide outlines the complete workflow for setting up a fast, reproducible local development environment for Salesforce. It covers initializing SFDX projects, managing scratch orgs, integrating Node.js for backend logic, and configuring hot reload and unit/integration testing using modern tools like Vitest. Ideal for developers aiming for rapid iteration and robust testing cycles.

This guide provides a comprehensive framework for load testing Shopify app integrations, specifically designed to respect strict API rate limits. It teaches users how to plan and benchmark system capacity for high-traffic events like Black Friday/Cyber Monday (BFCM) or flash sales using tools like k6. Users learn to optimize for burst events, analyze GraphQL cost, and configure infrastructure scaling for reliable e-commerce performance.

This guide provides a comprehensive and reproducible local development workflow for Shopify applications. It details how to use the Shopify CLI for scaffolding and hot reloading, integrate ngrok for stable webhook tunneling, and set up Vitest for robust API testing, enabling developers to achieve rapid and reliable iteration cycles.

This guide provides a comprehensive methodology for load testing and capacity planning within Snowflake data warehouses. It covers optimizing query performance by adjusting warehouse sizes (Scale UP), simulating high concurrency using multi-threading (Scale OUT), and configuring advanced scaling policies (Standard, Economy, Maximized). Users can benchmark critical queries using SQL and simulate real-world user traffic using Python, ensuring robust and cost-efficient production environments.