Skill UI

Designed to handle API integrations for services like Navan that lack a dedicated sandbox environment. This skill implements robust environment isolation (Development, Staging, Production) using separate OAuth credentials, advanced environment variable management, and a local development proxy/mock server. It ensures that development, testing, and CI/CD processes can run safely without modifying live production data.

This skill provides a comprehensive framework for setting up robust observability for Navan API integrations in production environments. It guides users through implementing structured logging, tracking request latency, classifying various errors (auth, rate limit, server), and monitoring the OAuth token refresh lifecycle. Includes practical steps and YAML examples for configuring alerts and building dashboards in platforms like Datadog, CloudWatch, or Prometheus/Grafana.

This skill implements resilient API interaction patterns for external services. It uses adaptive rate-limiting techniques, including exponential backoff and jitter, to gracefully handle HTTP 429 errors, adapting to undocumented server limits. Furthermore, it provides a dedicated request queue mechanism to manage concurrency, ensuring reliable execution of large-scale, bulk data operations without triggering service throttling.

A remote MCP server designed for AI agents to dynamically discover, inspect, and verify external tools, APIs, and services. It allows agents to search a curated index of AI-ready websites, check for machine-readable endpoints (like OpenAPI or MCP), and confirm if an endpoint responds correctly to JSON-RPC, enabling robust, dynamic agent workflow building.

A comprehensive skill for deploying production-ready Node.js applications that utilize the Notion API to serverless platforms like Vercel, Railway, or Fly.io. This guide implements critical best practices including Notion client singletons for serverless environments, robust rate limit handling (3 req/sec), response caching strategies, and essential health check endpoints to ensure stability and scalability in production.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

This comprehensive guide provides a detailed methodology for detecting and exploiting Server-Side Request Forgery (SSRF) vulnerabilities. It covers basic, blind, and out-of-band techniques, including testing against cloud metadata endpoints (AWS/GCP/Azure) and advanced bypass methods like DNS rebinding. It is an essential resource for web application security testing and bug bounty hunting.

A comprehensive guide detailing the methodology and techniques for exploiting Server-Side Template Injection (SSTI) across multiple template engines (Jinja2, Twig, Freemarker, etc.). Covers engine fingerprinting, blind exploitation, WAF evasion, and achieving Remote Code Execution (RCE) via various chains.

This skill provides robust, production-grade patterns for interacting with the OneNote Graph API. It addresses critical issues encountered in real-world applications, such as rate limiting (429 errors), transient server failures (502/503), and silent file upload failures. It includes retry decorators, batch request strategies, and proactive rate limit tracking mechanisms for both TypeScript and Python, ensuring highly reliable integrations.

This skill provides a comprehensive solution for deploying containerized applications to Oracle Cloud Infrastructure (OCI). It supports two primary deployment paths: OKE (Oracle Kubernetes Engine) for full Kubernetes orchestration, and Container Instances for a simpler, serverless alternative. Use this skill for automating the entire lifecycle, including pushing images to OCIR, provisioning OKE clusters via Python SDK, and executing Kubernetes deployments using kubectl.

This skill guides users on building robust, event-driven pipelines within Oracle Cloud Infrastructure (OCI). It covers setting up OCI Events rules to monitor resource state changes (Compute, Object Storage, Identity). Events can then be routed to Oracle Notification Service (ONS) topics for real-time alerting or directly to OCI Functions (serverless processing) for complex, automated actions.