Skill UI

This skill provides secure API integration patterns and implementation details for RemoFirst, a platform managing global HR, EOR, and payroll services. Use this when automating complex global employment workflows, retrieving employee data, or ensuring multi-jurisdictional payroll compliance.

This skill provides implementation patterns for utilizing Runway's AI video generation and creative platform. It covers setting up the SDK, generating videos from images, and handling common API errors (like insufficient credits or unauthorized access). It is designed for developers needing to integrate secure, high-quality AI video workflows into their applications.

This guide provides essential security and implementation guidance for automating TechSmith's screen capture (Snagit) and video editing (Camtasia) workflows. It covers using the Snagit COM API, best practices for batch rendering with Camtasia CLI, and technical details for scripting in PowerShell and Python using pywin32. It also addresses common error handling scenarios like permission issues and file locking, ensuring robust automation.

A comprehensive guide and workflow for deploying static websites (e.g., Vue, React, Angular, Hugo, Jekyll) from a local environment to a production server using VSCode SFTP. This skill covers setting up secure SFTP connections, generating production-ready Nginx configurations (including security headers, caching, and HTTPS redirects), and providing a complete deployment checklist for smooth CI/CD-like workflows.

This guide provides comprehensive security and integration details for the Workhuman Social Recognition and rewards API. Learn how to implement OAuth 2.0, manage peer-to-peer nominations, and sync data bidirectionally with major HRIS platforms like Workday and SAP SuccessFactors. Use cases include building custom recognition workflows and integrating with popular tools like Microsoft Teams and Slack.

This playbook is designed for advanced vulnerability assessment, covering flaws invisible to automated scanners. It guides testing for race conditions, complex workflow bypasses, state machine manipulation, financial parameter tampering (e.g., price/quantity manipulation), and coupon/credit abuse in multi-step applications. Essential for deep manual security testing.

This expert playbook covers advanced techniques for email header injection and authentication bypass. It details exploiting CRLF vulnerabilities in SMTP headers (e.g., BCC/CC injection, body control) and bypassing modern email security standards like SPF, DKIM, and DMARC. Essential for penetration testing of contact forms, email APIs, and password reset workflows.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

Skill Scout is a crucial pre-creation workflow designed to prevent the duplication of effort. Before building a new skill, it systematically searches local, marketplace, GitHub, and web sources. It not only finds potential matches but also rigorously vets them for security, maintenance status, and relevance, providing the user with clear options: Use Existing, Fork/Extend, or Create New.

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

This tool acts as a centralized orchestrator for the entire Go development lifecycle. It analyzes the current task context—whether designing an API, debugging a panic, or building a gRPC service—and intelligently loads multiple, highly relevant skills simultaneously. It ensures developers have comprehensive, context-aware support for complex workflows, handling everything from architecture and error management to performance tuning and security auditing.