Skill UI

These extensions enable developers to customize the Shopify checkout experience using sandboxed, React-like components. They serve as the modern replacement for the deprecated checkout.liquid, allowing deep integration into the purchase flow. Use cases include adding custom data fields (metafields), rendering dynamic promotional banners, and reading real-time checkout state information.

This guide provides a comprehensive methodology for load testing and capacity planning within Snowflake data warehouses. It covers optimizing query performance by adjusting warehouse sizes (Scale UP), simulating high concurrency using multi-threading (Scale OUT), and configuring advanced scaling policies (Standard, Economy, Maximized). Users can benchmark critical queries using SQL and simulate real-world user traffic using Python, ensuring robust and cost-efficient production environments.

Provides enterprise-grade data handling patterns tailored for Veeva Vault deployments. This guide is essential for professionals managing data operations in regulated life sciences environments. It covers best practices for advanced data retrieval using VQL, API integration, and ensuring compliance when writing, reading, or editing critical enterprise data.

This script provides a minimal working example for interacting with the Webflow Data API v2. It demonstrates the core operations, including listing sites, reading CMS collections, fetching existing CMS items (draft/live), and creating new content. Use this guide when starting a new Webflow integration or testing your basic API setup.

Generates a comprehensive, long-form, single-page article optimized for editorial reading. Ideal for developing high-quality blog posts, case studies, or detailed essays. The skill enforces structured design elements, including mastheads, hero images, pull quotes, figures, and related content sections, resulting in a professional, magazine-like aesthetic.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

A comprehensive guide detailing attack methodologies for Z-Wave smart home networks. Techniques covered include sniffing during inclusion (S0/S2), exploiting key derivation flaws, performing replay attacks on unauthenticated nodes, and crucial hub compromise (pivoting) to gain full control over the entire mesh network. Essential reading for IoT penetration testing.

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.