Skill UI

This guide provides implementation patterns for secure integration with the Podium API using REST API calls. It focuses on establishing robust connections with OAuth2 authentication for managing core business functions, including messaging, retrieving customer reviews, and processing payments. It also details essential error handling strategies.

This skill provides implementation patterns for integrating with the Podium API, a robust platform for business messaging, review management, and payment processing. It demonstrates best practices for using REST APIs with OAuth2 authentication. Users can use this guide to connect their systems, handle complex operations like fetching location data, and implement critical error handling and retry logic for stability.

This guide demonstrates how to implement a robust webhook handler for the Podium platform. Developers can process real-time business events—including incoming customer messages, new reviews, and completed payments—by setting up event routing and ensuring idempotent processing. Essential for integrating critical communication and transaction data into a backend system.

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

This skill guides the planning and review process for complex home or small-lab network changes. It covers creating staged migration plans for VLAN segmentation, implementing local DNS resolvers (like Pi-hole), setting up secure VPN access, and ensuring network safety through detailed inventory checks and rollback procedures. It emphasizes security best practices and trust zoning.

A comprehensive simulation of a General Counsel's (GC) review process. It interrogates contracts, term sheets, and agreements across critical legal domains: IP ownership, liability caps, data privacy (GDPR/CCPA), regulatory compliance (HIPAA/FDA), and employment structure. Use this before signing major agreements or entering new markets to identify hidden legal and operational risks.

A rigorous process for conducting an honest post-mortem review of executed strategic decisions. It scores outcomes against pre-committed success and kill criteria, re-evaluates original assumptions, and revisits preserved dissenting opinions to drive organizational learning. Essential for closing the strategic sprint loop.

This skill simulates a comprehensive international journal peer review process by dynamically configuring a 5-seat review panel. It includes a Journal-Fit Reviewer, three peer-review roles, and a Devil's Advocate to challenge core arguments. The system automatically identifies the paper's field and methodology, then generates five role-separated review reports followed by a structured Editorial Decision Letter and Revision Roadmap. It supports various modes including full review, re-review, quick assessment, and reviewer calibration, handling inputs in multiple languages.

This skill processes an exported JSON list of open pull requests (PRs) to generate a structured, blockers-first digest. It automatically identifies which PRs are blocked (due to failing checks, requested changes, or review status) and which are ready to merge. Ideal for daily standup meetings, triage sessions, and streamlining the code review backlog.