Skill UI

A comprehensive guide to securing Web3 applications utilizing Alchemy. It covers critical best practices, including implementing secure API key proxies, managing private keys via secret vaults, validating blockchain inputs (addresses, block numbers), and verifying webhook signatures to harden your dApp infrastructure.

A comprehensive, production-ready reference architecture for building robust data scraping systems using Bright Data's full suite of tools (Web Unlocker, Scraping Browser, SERP API). This template provides best practices for project layout, managing proxies, designing data pipelines, and integrating scheduling/storage components in a Node.js/TypeScript environment.

This comprehensive guide provides developers with step-by-step instructions for migrating between different Bright Data services and API versions. It covers complex transitions, such as upgrading from raw proxies to Web Unlocker, moving from Puppeteer to Scraping Browser, and updating datasets API endpoints (v2 to v3). Includes prerequisites, code examples, and rollback procedures for seamless integration.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

This guide outlines essential security best practices for managing and protecting your SerpApi API key. Since the key grants full account access, developers must never expose it in client-side code. It details how to implement secure backend proxies, manage environment variables using secret managers, set up rate limiting to prevent abuse, and monitor usage patterns in production environments.

HTTP Parameter Pollution (HPP) occurs when a single request contains multiple instances of the same parameter key. Different components in the request path (e.g., WAFs, proxies, application frameworks) may parse these duplicate keys using different rules (first value, last value, array join). This skill teaches how to exploit these discrepancies to bypass security checks, execute SSRF, or manipulate business logic.

This expert playbook covers advanced techniques for testing HTTP request smuggling and desynchronization vulnerabilities. It is critical when front proxies, CDNs, or load balancers disagree with the origin server on message framing (Content-Length vs Transfer-Encoding), or during protocol downgrades (HTTP/2 to HTTP/1). Use this to uncover deep security flaws like WAF bypass and session hijacking.

This skill guides the polishing and structural refinement of academic accounting manuscripts, specifically for Contemporary Accounting Research (CAR) journal submissions. It ensures the abstract is concise (≤300 words) and comprehensive, enforces front-loading of the research question and findings, and mandates strict consistency checks between constructs, proxies, and variables. It also ensures adherence to specific academic formatting rules, such as footnotes and author-date referencing.

This advanced analytical skill focuses on rigorously identifying and testing the specific transmission channels through which external shocks affect an economy. Essential for high-impact international economics research, it moves beyond descriptive mechanism narratives by focusing on testable proxies across trade, investment, finance, and expectation channels. It requires advanced econometrics (e.g., mediation analysis, sample splitting) and careful identification strategy to ensure causal claims are robust.

This advanced skill is designed for security research and CTF environments to trace subtle divergences in request handling across multiple network hops (proxies, gateways, backend servers). It focuses on identifying vulnerabilities stemming from differential interpretation of headers, path normalization, transfer framing (CL/TE), and host derivation, crucial for detecting request smuggling and parsing inconsistencies.

This specialized skill is used to trace complex network requests through multi-layered infrastructure, such as reverse proxies, container boundaries, and various header manipulations. It is essential for determining which specific node, proxy rule, or derived header ultimately serves a live request within a sandboxed environment. Use it when analyzing VHost routing, path rewrites, or X-Forwarded headers to pinpoint the decisive backend.

Configure nginx and Traefik as reverse proxies with TLS termination, path-based routing, rate limiting, security headers, compression, and certificate automation.