Skill UI

This guide provides a comprehensive tutorial on running various AI inference tasks using the Together AI API, which is compatible with the OpenAI standard. It demonstrates key functionalities including chat completions, streaming responses, image generation, and creating embeddings. This is ideal for developers who need to test open-source models, compare performance across different LLMs (like Llama or Mixtral), or integrate powerful generative AI features into their applications using Python or Node.js.

This guide provides comprehensive instructions for setting up and authenticating the Together AI SDK. It covers installation using both Python and Node.js, configuring the necessary API key, and verifying connectivity to utilize the OpenAI-compatible API for powerful open-source model inference and fine-tuning tasks. Ideal for developers starting with Together AI.

The official SDK for interacting with the Webiny Headless CMS and File Manager from external applications (Next.js, Vue, Node.js). It provides a robust TypeScript interface for performing CRUD operations (list, get, create, update, publish), advanced filtering, sorting, and ensuring type safety across complex content models. Use this when building frontends or backends that need to consume Webiny content data.

This wrapper provides a mechanism to integrate x402 payment walls into Node.js/Express APIs. It enforces micropayments (USDC on Base L2) for API access, enabling robust machine-to-machine (M2M) monetization. By acting as middleware, it requires valid payment signatures, ensuring that every API call is monetized and payments are liquidated atomically.

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

This advanced playbook covers escalating prototype pollution into Remote Code Execution (RCE) and Cross-Site Scripting (XSS). It details exploitation techniques across various environments, including Node.js child_process, EJS, Pug, Handlebars, and client-side libraries like jQuery and Lodash. It is designed for security researchers and penetration testers to systematic locate and exploit deep merge sinks and framework gadgets.

This skill provides a mechanism to execute TypeScript scripts using tsx, enabling fetching and streaming responses from external HTTP endpoints. It is designed for users who need a lightweight Node.js helper utility to manage simple network API calls, making it ideal for rapid integration and data fetching tasks.

Flox is a declarative, Nix-based environment manager designed to create perfectly reproducible development environments. It handles system-level dependencies (like compilers, databases, and native libraries) and ensures that complex toolchains across multiple languages (Python, Node.js, Go, etc.) function identically across macOS and Linux. Ideal for solving 'works on my machine' issues and onboarding new team members instantly.

A powerful PreToolUse hook designed to act as a safety net during code writing sessions. It automatically scans both file paths and content for 12 common security anti-patterns, including SQL injection, XSS, command injection (Node.js/Python), and unsafe deserialization. It blocks the writing operation and provides immediate warnings, ensuring adherence to secure coding practices when handling sensitive code like authentication or payment logic.

Run comprehensive, read-only exposure checks against your local machine or project directories in response to security advisories and CVEs. This tool systematically checks various ecosystems (Node.js, Python, Homebrew, etc.) to generate a structured, non-invasive audit report, helping users understand their actual risk exposure without making any system changes.

A comprehensive guide covering scalable backend architecture patterns, including Repository, Service, and Middleware design. It details best practices for building robust APIs using Node.js, Express, and Next.js. Topics covered include RESTful API structuring, database query optimization (preventing N+1 issues), implementing database transactions, and integrating caching strategies like Redis. This guide is essential for developing high-performance, maintainable server-side applications.