Skill UI

This guide addresses critical LangGraph streaming pitfalls, including state overdraw, proxy buffering issues (Nginx, Cloud Run), and excessive event noise. It provides a production-grade pattern for implementing robust SSE/WebSocket endpoints using FastAPI. Learn how to correctly select the `stream_mode` (messages, updates, values) and implement server-side event filtering to reliably build live-token chat UIs and perform comprehensive state visualization.

This skill provides comprehensive guidance on correctly configuring Model Context Protocol (MCP) servers within Claude Code. It details the critical concepts of configuration scope (user vs. project) and outlines best practices to prevent context pollution across different coding sessions. Users learn how to safely add, remove, and clean up MCP settings using specific JSON files, ensuring a stable and efficient development environment.

This guide provides comprehensive strategies for optimizing API usage and managing costs when integrating with Miro. It covers credit monitoring, advanced techniques like caching, server-side filtering, batching, and subscribing to webhooks. By implementing these best practices, developers can drastically reduce API call volume, stay within rate limits, and ensure highly efficient and cost-effective application development.

Designed to handle API integrations for services like Navan that lack a dedicated sandbox environment. This skill implements robust environment isolation (Development, Staging, Production) using separate OAuth credentials, advanced environment variable management, and a local development proxy/mock server. It ensures that development, testing, and CI/CD processes can run safely without modifying live production data.

This skill provides a comprehensive framework for setting up robust observability for Navan API integrations in production environments. It guides users through implementing structured logging, tracking request latency, classifying various errors (auth, rate limit, server), and monitoring the OAuth token refresh lifecycle. Includes practical steps and YAML examples for configuring alerts and building dashboards in platforms like Datadog, CloudWatch, or Prometheus/Grafana.

This skill implements resilient API interaction patterns for external services. It uses adaptive rate-limiting techniques, including exponential backoff and jitter, to gracefully handle HTTP 429 errors, adapting to undocumented server limits. Furthermore, it provides a dedicated request queue mechanism to manage concurrency, ensuring reliable execution of large-scale, bulk data operations without triggering service throttling.

A remote MCP server designed for AI agents to dynamically discover, inspect, and verify external tools, APIs, and services. It allows agents to search a curated index of AI-ready websites, check for machine-readable endpoints (like OpenAPI or MCP), and confirm if an endpoint responds correctly to JSON-RPC, enabling robust, dynamic agent workflow building.

A comprehensive skill for deploying production-ready Node.js applications that utilize the Notion API to serverless platforms like Vercel, Railway, or Fly.io. This guide implements critical best practices including Notion client singletons for serverless environments, robust rate limit handling (3 req/sec), response caching strategies, and essential health check endpoints to ensure stability and scalability in production.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

This comprehensive guide provides a detailed methodology for detecting and exploiting Server-Side Request Forgery (SSRF) vulnerabilities. It covers basic, blind, and out-of-band techniques, including testing against cloud metadata endpoints (AWS/GCP/Azure) and advanced bypass methods like DNS rebinding. It is an essential resource for web application security testing and bug bounty hunting.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.