Skill UI

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

This comprehensive checklist guides thorough security testing of OAuth 2.0 and OpenID Connect (OIDC) protocols. It covers advanced vulnerabilities such as authorization code interception, PKCE bypass, CSRF flaws, and improper scope validation. The methodology emphasizes modern industry standards like FAPI (DPoP, JAR, PAR), making it essential for penetration testers and security researchers assessing web application integrity and API security.

This guide provides comprehensive solutions for common API errors encountered when integrating with Persona for identity verification (KYC). It covers critical issues including 401 unauthorized keys, 422 invalid templates, webhook signature mismatches, rate limit handling (429), and state management conflicts. Use this resource when debugging or optimizing automated identity validation workflows.

This guide provides a complete, end-to-end workflow for implementing Know Your Customer (KYC) identity verification using the Persona API. It details both backend implementation (creating inquiries, handling completion callbacks, resuming flows) and frontend integration (embedding the verification UI into web applications). Ideal for secure user onboarding and identity validation processes.

A comprehensive, step-by-step checklist for safely deploying Salesforce integrations to a production environment. This guide covers critical stages including pre-deployment configuration, sandbox validation, API limit planning, code quality enforcement, health endpoint checks, and detailed rollback procedures, ensuring smooth and reliable go-live.

This comprehensive guide details setting up robust CI/CD pipelines using GitHub Actions for testing SalesLoft API integrations. It enables running unit tests with mocked responses, performing live integration tests against the actual SalesLoft API (including OAuth token validation and connectivity checks), and ensuring deployment stability. Use this skill when automating quality assurance, validating API endpoints, or managing complex SaaS workflow deployments.

This guide provides a quick reference for the most common SalesLoft REST API v2 errors, including 401 (Unauthorized), 403 (Forbidden), 422 (Validation), 429 (Rate Limit), and 5xx (Server Errors). It details the causes, specific fixes, and best practices, helping developers quickly diagnose and resolve integration issues to ensure seamless data exchange within the SalesLoft platform.

This guide provides a comprehensive setup for Continuous Integration (CI) and Continuous Deployment (CD) for SerpApi integrations. It outlines using fixture-based unit tests via GitHub Actions for Pull Requests (preventing API credit consumption) and controlled live integration tests on the main branch. This ensures robust and reliable search result parsing validation.

This wrapper integrates Shopify's official AI Toolkit MCP server with Claude Code. It provides essential developer capabilities, including real-time GraphQL schema validation, Liquid template linting (checking for deprecated filters and anti-patterns), and instant search across Shopify's extensive documentation. Use this skill when setting up complex Shopify MCP integrations, ensuring code quality, or debugging API calls.

A comprehensive guide for diagnosing and fixing common Shopify API errors, including HTTP status codes (401, 403, 422, 429) and GraphQL userErrors. This tool helps developers quickly identify the root cause of failed API requests, whether due to incorrect scopes, expired tokens, or validation issues, and provides actionable steps for resolution.

This comprehensive guide details strategies for optimizing Shopify API performance. Key techniques include reducing excessive GraphQL query costs, implementing bulk operations for large data exports, setting up robust response caching with webhook invalidation, and utilizing the Storefront API for high-traffic public storefronts. Essential for developers hitting rate limits or slow data retrieval.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.