Skill UI

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.

A comprehensive guide and toolkit for performing deep security assessments on mobile application backends. It covers identifying vulnerabilities such as broken authentication, insecure token management (JWT, opaque tokens), session fixation, privilege escalation, and IDOR (Broken Object-Level Authorization) across various OAuth flows (OIDC, PKCE). Essential for penetration testers assessing API security.

This utility allows developers to view, add, and modify design tokens (such as colors, spacing, typography, and shadows) within the StyleSeed design system. It ensures visual consistency by managing the synchronization of changes across JSON source files and corresponding CSS custom properties, supporting both light and dark mode variations.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.

A comprehensive guide detailing three validated architectural patterns (Monolith, Service Layer, Microservice) for integrating with the Canva Connect API. This blueprint helps developers choose the optimal structure—from simple MVPs to complex enterprise systems—by addressing concerns like token management, asynchronous exports, rate limiting, and scaling strategies.

A comprehensive resource detailing common anti-patterns and critical mistakes when integrating with the Canva Connect API. This guide covers essential best practices, including robust token management, handling rate limits, implementing asynchronous workflows, and securing webhooks. Ideal for developers conducting code reviews, onboarding new team members, or auditing existing Canva-related integrations.

Provides comprehensive guides and code examples for deploying ClickUp-powered applications to various cloud environments like Vercel, Fly.io, and Google Cloud Run. It covers secure secret management, API token handling, setting up health checks, and processing webhooks, ensuring robust and scalable SaaS integrations.

Provides comprehensive guides on setting up ClickUp API v2 authentication. Learn how to implement both Personal API Tokens (for server-side use) and OAuth 2.0 (for multi-user applications). This skill covers secure credential management, making authenticated HTTP requests, and handling common API error codes, ensuring robust integration development.

A comprehensive guide for diagnosing and resolving common errors encountered when integrating with the Figma REST API or Figma Plugin API. It covers status codes (403, 429, 404), token management, rate limiting, and plugin-specific runtime issues, ensuring robust and stable API development.

This skill provides comprehensive instructions and code examples for deploying Figma-powered applications, such as webhook receivers and design token APIs, to various production platforms including Vercel, Google Cloud Run, and Fly.io. It covers best practices for secret management, setting up robust webhooks, and implementing health checks to ensure reliable operation in a production environment.

A comprehensive guide to installing the flyctl CLI and setting up secure authentication for Fly.io edge compute deployments. This guide covers both interactive login and API token methods (User, Deploy, Org, Machines), which are essential for CI/CD pipelines and advanced resource management via the Machines API.

A comprehensive guide detailing security best practices for integrating and managing enterprise search with Glean. It covers critical topics such as indexing token management, validating webhook signatures, implementing input validation using Zod, and techniques for data redaction, ensuring that sensitive information is protected across the entire search lifecycle.