Skill UI

This skill integrates LangChain 1.0 and LangGraph 1.0 into standard OpenTelemetry (OTEL) backends (e.g., Jaeger, Honeycomb, Tempo). It solves critical observability gaps by ensuring correct prompt content capture, propagating spans across complex subgraphs, and providing five LLM-specific Service Level Objectives (SLOs) like latency and cost. Ideal for multi-tenant, compliance-sensitive, or existing OTEL stack environments where LangSmith is unsuitable.

This skill provides advanced techniques for robust prompt engineering within LangChain applications. It solves common production issues, such as f-string template breakage when user input contains literal curly braces, and guides developers on consolidating scattered prompts. Crucially, it details how to use the LangSmith Prompt Hub to version, pin, and A/B test prompts using immutable commit hashes, ensuring stable, reproducible LLM deployments.

This skill generates standardized, production-ready `mise.toml` configurations. It helps developers standardize runtime versions across mixed-language projects (e.g., Node.js, Python, Go, etc.) and CI/CD pipelines, eliminating the need for multiple legacy version managers like asdf or nvm. Ideal for ensuring reproducible, consistent development environments.

This skill provides an advanced guide for configuring robust enterprise governance within Navan. Administrators can define granular role hierarchies (e.g., Global Admin, Department Manager), establish department-specific travel policies (such as max hotel rates or preferred chains), and implement multi-tier, automated approval workflows. Use this when establishing strict policy enforcement and complex approval chains for a large, regulated organization.

This skill provides comprehensive management for Navan organizational entities, including users, departments, cost centers, and approval chains. It supports user lifecycle management via SCIM 2.0 provisioning (integrating with Okta, Entra ID) and enables detailed auditing of user access and structural compliance. Essential for large organizations managing complex travel policies and identities.

Provides advanced debugging techniques for Notion API issues that standard troubleshooting cannot resolve. It covers response ID inspection, tracing complex permission chains, detecting property type mismatches, managing pagination edge cases, and resolving block nesting limits across Notion databases and pages. Essential for robust integration development.

This curriculum covers foundational exploitation techniques essential for binary security analysis. Users will learn to control program execution flow, including overwriting EIP/RIP, constructing ROP chains, implementing ret2libc, and shellcode injection. It provides practical, hands-on exercises on stack overflows and heap manipulation in a controlled Linux environment, establishing the core primitives needed before tackling modern mitigation bypasses.

This is a detailed offensive checklist for identifying and exploiting insecure deserialization vulnerabilities across multiple programming languages (Java, Python, PHP, .NET, Node.js, etc.). It covers techniques like gadget chain generation, magic method abuse, type confusion, and modern attack vectors, providing a deep methodology for penetration testing and vulnerability research.

A comprehensive reference and bypass catalog covering modern operating system kernel mitigations such as KASLR, SMAP, SMEP, KPTI, DEP/NX, and CFI. It details how these security mechanisms function, how to detect their presence, and advanced bypass techniques (e.g., side-channel attacks, ROP chains, information leaks). This skill is essential for security professionals conducting deep penetration testing, exploit development, and target hardening assessments.

This comprehensive checklist guides users through identifying and exploiting open redirect vulnerabilities in web applications. It covers parameter identification, advanced bypass techniques (e.g., URL encoding, CRLF injection), and chaining the vulnerability with other flaws like OAuth or SSRF. Ideal for web application penetration testing and bug bounty hunting.

A comprehensive, structured framework for conducting sophisticated Open Source Intelligence (OSINT) and cryptocurrency forensic investigations. This guide covers operational security (OpSec), target profiling, advanced transaction tracing across multiple blockchain layers (L1/L2), wallet analysis, and identifying linked digital assets. Use this methodology to guide systematic, multi-dimensional intelligence collection campaigns.

This skill provides a deep dive into modern Windows exploit mitigations, including ASLR, DEP/NX, CFG, and CET. It covers how these core protections work, techniques for detecting them, and advanced methodologies for analyzing bypass strategies. It is essential reading for security researchers and penetration testers planning advanced exploitation chains against modern operating systems.