Skill UI

A comprehensive checklist and methodology for testing Cross-Site Scripting (XSS) vulnerabilities. Covers all major types, including Stored, Reflected, DOM, and Blind XSS, along with advanced techniques like CSP bypass, polyglot payloads, and event handler injection. Essential for web application security testing and bug bounty hunting to identify and mitigate malicious script injection risks.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill guides developers through critical breaking changes when upgrading OneNote integrations using the Microsoft Graph SDK. It details how to migrate from app-only to delegated authentication, replace decommissioned webhooks with polling, update deprecated search endpoints to OData filters, and upgrade the Graph SDK from v5 to v6. Essential for maintaining compatibility with modern Microsoft Graph APIs.

This utility addresses the lack of webhooks for OneNote resources. It implements an efficient change detection mechanism by performing timestamp-based polling and delta query comparisons against the Microsoft Graph API. It is essential for building real-time synchronization, change monitoring, or event-driven integrations for OneNote, while carefully managing API rate limits.

This guide establishes an optimized local development loop for Oracle Cloud Infrastructure (OCI). It teaches users how to bypass the slow web console by setting up dedicated CLI profiles (dev, staging, prod), managing environment variables, and creating robust shell aliases. This allows developers to perform complex operations—such as listing resources, launching instances, and managing storage—directly from the terminal, ensuring speed and consistency across all environments.

This skill guides users on building robust, event-driven pipelines within Oracle Cloud Infrastructure (OCI). It covers setting up OCI Events rules to monitor resource state changes (Compute, Object Storage, Identity). Events can then be routed to Oracle Notification Service (ONS) topics for real-time alerting or directly to OCI Functions (serverless processing) for complex, automated actions.

This skill establishes a robust two-way synchronization bridge between a local working directory (for ARIS audits and local processing) and an Overleaf project. It allows users to maintain complex, local auditing pipelines while enabling real-time, collaborative editing in the Overleaf web UI. Features include controlled 'pull' (detecting remote changes and applying audited merges) and 'push' (syncing local fixes back to the collaborators).

This guide provides comprehensive technical instructions for optimizing Palantir Foundry costs. Learn to use incremental transforms to drastically reduce compute rebuilds, right-size Spark profiles based on data volume, and migrate from expensive API polling to efficient, event-driven webhooks, ensuring both cost efficiency and system stability.

This comprehensive guide details the process of implementing a secure and robust system for handling Palantir Foundry webhook events. It covers key steps including API-based webhook registration, mandatory signature verification with replay protection, sophisticated event routing for various object lifecycles (create, update, delete), and ensuring idempotent processing using caching mechanisms like Redis. Use this when external microservices must react reliably and immediately to changes within the Foundry Ontology or data assets.

This skill provides a structured guide for setting up CI/CD pipelines to test Persona identity verification integrations. It demonstrates how to use sandbox API credentials, simulate webhooks, and run comprehensive integration tests. It is essential for developers ensuring the reliability and security of KYC/identity services before deployment.

This guide provides comprehensive solutions for common API errors encountered when integrating with Persona for identity verification (KYC). It covers critical issues including 401 unauthorized keys, 422 invalid templates, webhook signature mismatches, rate limit handling (429), and state management conflicts. Use this resource when debugging or optimizing automated identity validation workflows.

This guide provides a complete, end-to-end workflow for implementing Know Your Customer (KYC) identity verification using the Persona API. It details both backend implementation (creating inquiries, handling completion callbacks, resuming flows) and frontend integration (embedding the verification UI into web applications). Ideal for secure user onboarding and identity validation processes.