Skill UI

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.

This comprehensive checklist details advanced methods for bypassing Web Application Firewalls (WAFs) during security assessments. Techniques covered include encoding bypass (URL, Unicode, double encoding), HTTP header manipulation, IP rotation, payload obfuscation, and fingerprinting specific WAF vendors (e.g., Cloudflare, Akamai). It is essential for penetration testers evaluating the robustness of web defenses.

This comprehensive guide serves as a complete error decoder for the OneNote Graph API. It analyzes major HTTP status codes (400, 403, 404, 429, 500, 502, 507) and provides root cause analysis, diagnostic steps, and code fixes for common issues. It specifically addresses critical failure modes like deprecated authentication methods and silent 200 OK failures, helping developers debug complex API integrations in production.

This skill provides a comprehensive guide and code examples for creating a complete OneNote structure (Notebook, Section, and Page) using the Microsoft Graph API. It specifically addresses the critical technical requirement that OneNote content must follow strict XHTML standards, detailing common HTML pitfalls (such as unclosed tags, unsupported attributes, and merge cell usage) that can lead to silent content corruption during API calls.

Comprehensive guide for setting up delegated authentication for the OneNote Graph API using MSAL. Learn how to register applications in Azure AD, configure precise permission scopes, install SDKs (Python/TypeScript), and implement token caching. This guide specifically addresses the migration from deprecated app-only authentication methods.

A comprehensive guide to launching, listing, and managing Oracle Cloud Infrastructure (OCI) compute instances using Python. This guide specifically addresses the common 'Out of host capacity' error when using Always Free ARM shapes, implementing a robust retry loop to ensure successful deployment. Users can learn the full lifecycle management, from initial connection setup to instance state polling.

This comprehensive skill guide provides deep insight into Oracle Cloud Infrastructure (OCI) IAM policy syntax and best practices. It covers the privilege verb hierarchy (inspect, read, use, manage), the correct structure for policy statements, and common patterns for granting least-privilege access across various compartments. Use this when developing automation scripts, setting up complex access control policies, or performing security audits in OCI.

A specialized AI agent designed to build and audit business models using Alexander Osterwalder’s comprehensive 9-block framework. It moves beyond mere filling of blocks, focusing on establishing the critical logical 'lock' between core components like Value Propositions, Customer Segments, and Cost Structures. This tool is ideal for initial business architecture design, auditing existing models for internal consistency (e.g., ensuring every key activity has a corresponding cost), or re-validating the core logic during a strategic pivot.

This framework implements the OWASP Top 10 standards, specifically tailored for Agentic Applications. It provides a standardized methodology to classify and map diverse security findings—such as prompt injection, tool misuse, and privilege abuse—to ten core risk categories (ASI01-ASI10). It is essential for security teams to systematically assess, prioritize, and remediate vulnerabilities inherent in complex AI agent systems.

Comprehensive guide for setting up Continuous Integration/Continuous Deployment (CI/CD) pipelines for Palantir Foundry integrations using GitHub Actions. This workflow covers running PySpark unit tests, performing SDK integration tests with mocked APIs, and implementing custom linting rules to enforce Foundry-specific best practices. Use this when ensuring code quality and validating complex business logic changes in an automated build process.

This comprehensive guide provides quick, actionable solutions for the top common Palantir Foundry API and data transformation errors. It covers critical issues such as 401 Unauthorized, 403 Forbidden, ObjectTypeNotFound, and OutOfMemoryError. By offering specific code examples and best practices, this resource helps users efficiently debug and resolve complex issues in their Foundry pipelines.

This skill provides a comprehensive guide for deploying Palantir Foundry integrated applications to major cloud platforms, such as GCP Cloud Run, AWS Lambda, and Docker. It covers best practices including containerization using Docker, implementing robust secrets management via cloud secret managers, establishing health check endpoints, and configuring environment-specific scopes. This process ensures applications are production-ready, secure, and highly available.