Skill UI

This guide provides comprehensive technical details and rate limit guidance for integrating with the Workhuman Social Recognition and Rewards API. It covers key concepts such as OAuth 2.0 authentication, peer-to-peer recognition workflows, and bidirectional synchronization with major HRIS systems (e.g., Workday, SAP). Use this when developing applications that automate employee recognition, manage rewards, or build complex HR workflows.

This guide provides the reference architecture for integrating Workhuman's Social Recognition and rewards APIs. It details key concepts like OAuth 2.0, peer-to-peer recognition, and configurable awards. Use this skill when building complex employee recognition workflows, syncing data bi-directionally with HRIS systems (e.g., Workday, SAP), or integrating with collaboration tools like Slack and Microsoft Teams.

This guide provides comprehensive SDK patterns and API documentation for integrating Workhuman Social Recognition and rewards systems. It covers key concepts like OAuth 2.0 authentication, peer-to-peer nominations, configurable award levels, and bidirectional synchronization with major HRIS platforms (Workday, SAP). Use this resource when building custom recognition workflows or integrating Workhuman functionality into enterprise systems.

This guide provides comprehensive security and integration details for the Workhuman Social Recognition and rewards API. Learn how to implement OAuth 2.0, manage peer-to-peer nominations, and sync data bidirectionally with major HRIS platforms like Workday and SAP SuccessFactors. Use cases include building custom recognition workflows and integrating with popular tools like Microsoft Teams and Slack.

This guide provides comprehensive instructions for handling Workhuman webhooks events, focusing on employee recognition and rewards APIs. It details key concepts like OAuth 2.0, peer-to-peer recognition, and reward redemption. Use this skill when integrating Workhuman Social Recognition into existing HRIS systems (like Workday or SAP) or automating internal recognition workflows.

An expert playbook detailing advanced attacks against JWT and OAuth 2.0 tokens. Covers cryptographic weaknesses like alg:none, key confusion (RS256 to HS256), and header injection (kid, jku). It also addresses critical OAuth flow abuses, such as missing state parameters, account takeover, and token leakage, essential for robust application security testing.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

This skill simulates advanced red-teaming techniques targeting Microsoft Entra ID's OAuth 2.0 device-code flow and illicit consent mechanisms. It demonstrates how attackers can steal access and refresh tokens, bypass Multi-Factor Authentication (MFA), and pivot across various Microsoft 365 services. It is designed for authorized security testing to validate token protection and conditional access policies.

This skill provides comprehensive integration with the X (Twitter) API, enabling users to programmatically post, read, search, and analyze tweets and timelines. It covers essential authentication patterns (OAuth 2.0 and OAuth 1.0a), rate limit handling, and best practices for building robust X integrations and bots.