Skill UI

Analyzes a website’s HTTP security headers to identify missing or misconfigured directives, then produces a graded report with scores and recommendations for strengthening protections against common web threats.

Guides REST API teams on naming resources, versioning, pagination, OpenAPI specs, error handling, headers, and rate limiting to keep services consistent, scalable, and client-friendly.

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

This comprehensive tool provides an automated, multi-stage checklist for deploying Apollo.io integrations to a production environment. It validates crucial aspects including secure authentication (API keys, headers), system resilience (rate limiting, retry logic), observability (PII redaction, structured logging), and financial controls (credit tracking). Use this checklist before going live or when performing production system audits to ensure full compliance and stability.

Automates generation and execution of API endpoint tests for REST and GraphQL services, covering CRUD operations, authentication workflows, OpenAPI contract validation, and response verification (status, headers, body).

Automates generation and execution of API endpoint tests for REST and GraphQL services, covering CRUD operations, authentication workflows, OpenAPI contract validation, and response verification (status, headers, body).

Search, filter, and extract data from Burp Suite .burp files via the burpsuite-project-file-parser CLI wrapper, letting you fetch targeted headers, audit findings, or traffic snippets without loading the GUI when hunting for security issues.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Fuzzing Dictionary supplies domain-specific tokens to guide fuzzers when targeting parsers, protocols, configs, or file formats so they reach deeper logic; include magic bytes, headers, keywords, and combine generation from LLMs, headers, or binaries before passing via the fuzzer flag.

This guide provides comprehensive techniques for managing API rate limits and ensuring reliable, high-volume API usage with Gamma. It covers methods such as reading rate limit headers, implementing exponential backoff for automatic retries, and building robust request queuing systems to handle throttling gracefully.

A comprehensive utility for managing Groq's API rate limits (RPM/TPM). It implements robust patterns including exponential backoff, automated retries upon 429 errors, and structured request queuing to ensure stable and efficient high-throughput API calls. Includes functions for parsing detailed rate limit headers.