Skill UI

Lightweight Google Drive integration with standalone OAuth authentication. No MCP server required. Supports full read/write operations: search, list, upload, download, move, copy, rename, trash files and folders. Requires Google Workspace account.

Expert patterns for HubSpot CRM integration covering OAuth authentication, CRM objects, associations, batch operations, webhooks, custom objects, and Node.js/Python SDKs.

A skill for identifying and exploiting authentication bypass vulnerabilities in web applications, including SSO/SAML, OAuth, XMLRPC, and API auth layers. Provides a step-by-step methodology, attack surface signals, and crown jewel targets. For authorized security assessments only.

Hunting methodology for OAuth vulnerabilities from 22 bug bounty reports, covering redirect_uri bypass, CSRF state, nonce replay, referrer leakage, and mobile deep link attacks for authorized security assessments.

Methodology for hunting open redirect flaws in web apps: parameter discovery, bypass payloads, DOM-based sinks, OAuth auth-code theft chains and SSRF escalation. Docs-only, for authorized bug bounty and pentest use.

Authorized assessment of federated identity systems: SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token-confusion issues. Provides workflow checklists and toolchain guidance for validating SSO flows, signature checks, redirect_uri handling, PKCE, and more.

Automates Monday.com boards, items, columns, groups, and updates through Rube MCP tooling; retrieves current schemas with RUBE_SEARCH_TOOLS and manages Monday.com OAuth links before running creation or update workflows.

This guide provides expert patterns for implementing secure, full-stack authentication in Next.js using Supabase. It covers essential architectural components, including setting up separate browser and server clients, utilizing middleware for route protection and session refreshing, handling OAuth callbacks, and implementing auth operations safely via Server Actions and Server Components. Essential knowledge for building secure, modern web applications.

Automate Microsoft Outlook operations including emails, calendar events, contacts, and folders using Rube MCP. Supports KQL search, OData filters, and OAuth connections for Microsoft 365 enterprise accounts. Ideal for workflow automation and email management tasks.

An end-to-end workflow for building robust, production-ready Python backend APIs. This guide covers all stages, including project scaffolding, SQLAlchemy database integration, Pydantic validation, implementing JWT/OAuth2 authentication, comprehensive error handling, unit testing, and Docker deployment for modern microservices.

This skill provides command-driven methods to audit and harden security configurations across common SaaS platforms like GitHub, Slack, Google Workspace, and AWS. It covers inventory auditing, OAuth management, identity verification, branch protection, and session policies to prepare for compliance audits and reduce security risks.

Build production-ready Slack apps using the Bolt framework in Python, JavaScript, or Java. Covers Block Kit rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration.