Skill UI

A deep dive into handling typed content blocks (text, image, tool_use, thinking, document) in LangChain 1.0. This skill standardizes multi-modal message composition, tool-call iteration, and complex content handling across providers like Claude, GPT-4o, and Gemini, solving key API discrepancies.

A comprehensive guide to advanced, production-ready LLM inference using LangChain 1.0. This skill addresses common pitfalls and bugs when integrating multiple providers (Claude, GPT-4o, Gemini), covering issues like structured output reliability, correct streaming token accounting, and robust handling of complex AIMessage content blocks. It teaches best practices for model initialization, provider routing, and version-safe code implementation.

This skill provides a comprehensive guide for deploying Navan's connections to major enterprise platforms, including ERP systems (NetSuite, Xero), HRIS (Workday), and Identity Providers (Okta, Azure AD). It covers best practices for expense sync, user provisioning (SCIM), and Single Sign-On (SAML/OIDC) using APIs and admin configurations, ensuring secure and accurate data flow across disparate business systems.

Provides a comprehensive, production-ready standard 3-tier reference architecture for Oracle Cloud Infrastructure (OCI). The design covers essential components like VCN, public/private subnets, Internet Gateway, NAT Gateway, Service Gateway, and Autonomous Database. It includes deployment steps using Terraform and OCI SDK Python code, making it ideal for designing new cloud environments or migrating existing patterns from other major cloud providers.

Provides comprehensive strategies for migrating embedding models within Qdrant. This guide covers zero-downtime alias swapping, side-by-side A/B testing, and transitioning from dense to hybrid search. It is essential for production environments requiring continuous availability when updating models, dimensions, or switching providers.

A comprehensive catalog of reusable abstractions, hooks, and providers for rapidly building complex administrative dashboards and web applications. It provides foundational building blocks like state management providers, command palettes, form model factories, and specialized components, streamlining the development process for robust internal tools.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

Open Dynamic Workflows (ODW) is an advanced, open-source engine designed to manage complex coding tasks using multiple AI agents. It operates in three stages: planning the task into parallel subtasks, orchestrating various coding agents (like Codex or Antigravity) to work concurrently, and finally, performing an adversarial verification pass to challenge and validate the combined output before merging. It supports multiple model providers and is ideal for structured, high-reliability software development.

Build with and use Pi, a minimal terminal coding harness. Covers install, provider and model config, TypeScript extensions, skills, packages, themes, SDK embedding, RPC and JSON event streams, session parsing, local llama.cpp models, custom providers, TUI components, and ecosystem packages like pi-subagents and pi-mcp-adapter.

This tool conducts structured reviews of various Infrastructure-as-Code (IaC) tools (e.g., Terraform, Pulumi) across multiple cloud providers. It generates an actionable report that categorizes findings by severity (Critical, High, Medium, Low), providing detailed remediation steps and a reusable best-practice checklist for continuous security, compliance, and operational auditing.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.