Skill UI

This skill provides comprehensive guidelines for detecting Business Email Compromise (BEC), a sophisticated fraud scheme. It covers detection techniques using email gateway rules, behavioral analytics, and robust financial process controls. Learn to identify red flags like unusual payment requests, domain mismatches, and patterns of social engineering to protect against financial loss.

A comprehensive guide and technique set for detecting and exploiting race condition vulnerabilities in web applications. It focuses on bypassing rate limits, exploiting Time-of-Check-to-Time-of-Use (TOCTOU) flaws, and duplicating transactions using advanced methods like Turbo Intruder's single-packet attack. Ideal for security assessments of state-changing operations (e.g., payments, inventory management, coupon redemption).

This guide details the technique and workflow for executing HTTP Parameter Pollution (HPP) attacks. HPP exploits how web applications and back-end systems handle duplicate HTTP parameters (e.g., first-wins, last-wins, concatenation). It is a critical method for bypassing Web Application Firewalls (WAFs), testing input validation logic, and identifying vulnerabilities in API, OAuth, and payment processing flows.

Register ICANN domains via a REST API with crypto payments so AI agents can autonomously check availability, pay in USDC/USDT/ETH/BTC, and retrieve DNS management credentials.

Guides founders to turn a product idea into a deliverable manual process, document every step, validate payment-ready customers, and plan when to automate after mastering the manual workflow.

Adds x402 payment execution to AI agents with per-task budgets, spending controls, and non-custodial wallets. Supports Base via agentwallet-sdk and X Layer via OKX Payments for safe API purchases and agent-to-agent payments.

This skill provides comprehensive forensic analysis of cryptocurrency payment flows stemming from ransomware attacks. It leverages blockchain APIs and advanced techniques to identify wallet clusters, track fund movement through obfuscation methods like mixers and peel chains, and map funds to exchanges. It is crucial for law enforcement, incident responders, and threat intelligence analysts conducting ransomware attribution.

A comprehensive guide for integrating and managing Firebase In-App Messaging within Flutter applications. This skill covers initial setup, programmatic message triggering via custom events, advanced message suppression during critical flows (like payments), and implementing GDPR-compliant opt-in data collection. It also details full campaign management, including targeting, scheduling, A/B testing, and device-specific testing workflows for optimal user engagement.

This comprehensive toolkit automates all major Stripe payment operations, including customer management, creating charges, handling subscriptions, generating invoices, and processing refunds. By leveraging structured workflows through Rube MCP, it provides a unified interface for complex financial processes, ensuring reliable and efficient automation of your billing and payment systems.

A comprehensive automation skill for managing core business processes within the Square ecosystem. It enables users to list, monitor, cancel payments, search and update customer orders, manage business locations, and handle invoices. Designed for complex, multi-step workflows, ensuring robust handling of parameters, versioning, and pagination for reliable commercial operations.

A comprehensive coach guiding developers through the entire SaaS lifecycle: from initial idea and scaffolding (Next.js) to building MVP features, integrating AI, setting up authentication, implementing payment systems (Stripe/LemonSqueezy), and achieving global deployment (Cloudflare/Vercel). Focuses on pragmatic, 'ship first' architecture decisions for solo developers and indie hackers.

This skill implements Alchemy Notify webhooks to provide real-time, event-driven notifications for on-chain activities. Instead of continuous polling, it allows applications to receive callbacks for wallet transfers, confirmed transactions, dropped transactions, or NFT events. Use it for building real-time dApp features, monitoring critical wallet activity, or integrating payment confirmations into your blockchain applications.