Skill UI

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

This comprehensive guide provides a detailed methodology for detecting and exploiting Server-Side Request Forgery (SSRF) vulnerabilities. It covers basic, blind, and out-of-band techniques, including testing against cloud metadata endpoints (AWS/GCP/Azure) and advanced bypass methods like DNS rebinding. It is an essential resource for web application security testing and bug bounty hunting.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This guide provides a comprehensive workflow for developing and testing with Persona's identity verification services in a controlled sandbox environment. It details setting up local environment variables, tunneling webhooks using ngrok, creating test inquiries via API, and mocking API responses for robust unit and integration testing.

Provides comprehensive strategies for migrating embedding models within Qdrant. This guide covers zero-downtime alias swapping, side-by-side A/B testing, and transitioning from dense to hybrid search. It is essential for production environments requiring continuous availability when updating models, dimensions, or switching providers.

This guide outlines the complete workflow for setting up a fast, reproducible local development environment for Salesforce. It covers initializing SFDX projects, managing scratch orgs, integrating Node.js for backend logic, and configuring hot reload and unit/integration testing using modern tools like Vitest. Ideal for developers aiming for rapid iteration and robust testing cycles.

This comprehensive guide details setting up robust CI/CD pipelines using GitHub Actions for testing SalesLoft API integrations. It enables running unit tests with mocked responses, performing live integration tests against the actual SalesLoft API (including OAuth token validation and connectivity checks), and ensuring deployment stability. Use this skill when automating quality assurance, validating API endpoints, or managing complex SaaS workflow deployments.

This guide provides a comprehensive setup for Continuous Integration (CI) and Continuous Deployment (CD) for SerpApi integrations. It outlines using fixture-based unit tests via GitHub Actions for Pull Requests (preventing API credit consumption) and controlled live integration tests on the main branch. This ensures robust and reliable search result parsing validation.

This utility provides a robust local development loop for integrating search APIs (like SerpApi). By caching real search responses into fixtures, developers can test search integrations, write unit tests, and develop features offline without incurring continuous API costs. It includes detailed instructions and code examples for Python and Node.js, ensuring cost-effective and reproducible testing.

This guide provides a minimal, working example of connecting to a Shopify store using the GraphQL Admin API. It demonstrates how to initialize the API client, authenticate the connection, and execute a query to retrieve product and variant details. Ideal for developers starting a new e-commerce integration, testing API connectivity, or learning basic Shopify data retrieval patterns.

This guide provides a comprehensive and reproducible local development workflow for Shopify applications. It details how to use the Shopify CLI for scaffolding and hot reloading, integrate ngrok for stable webhook tunneling, and set up Vitest for robust API testing, enabling developers to achieve rapid and reliable iteration cycles.

This comprehensive skill guides users through the entire lifecycle of developing AI agent skills. From initial concept (Understand) to structured design, writing the core skill logic, rigorous testing, and final performance optimization. It ensures skills are robust, accurate, and highly triggerable across any domain, including engineering, content creation, and research.