Skill UI

Scans Cairo/StarkNet smart contracts for six critical issues spanning felt252 arithmetic, messaging, access control, and signature replay, reporting severity and fixes to support audits, bridge reviews, and pre-launch security checks.

cargo-fuzz provides a Cargo subcommand that lets Rust projects fuzz with libFuzzer, automating sanitizer flags, corpus/dictionary handling, crash replay, coverage reports, and harness rules, so teams can quickly validate unsafe-aware code.

A comprehensive runbook for standardizing incident response to Deepgram production issues. It guides users through automated triage (checking status, API connectivity, and model performance), severity classification (SEV1-SEV4), and implementing mitigation strategies, including building fallback services and replaying failed requests to ensure business continuity during outages or degradation.

A comprehensive framework for setting up and processing Linear webhooks. This skill demonstrates best practices for real-time event handling, including mandatory HMAC signature verification, replay attack prevention, and robust event routing for various data types (Issues, Comments, Projects). Ideal for building reliable, real-time integrations between Linear and external systems.

A comprehensive guide to managing Sentry's event volume, quotas, and rate limits. Learn how to prevent 429 Too Many Requests errors and control costs by implementing client-side sampling (sampleRate/tracesSampleRate), using beforeSend filters to drop noisy errors, and understanding various quota types (Errors, Transactions, Replays). Essential for high-volume, cost-sensitive applications.

This skill provides comprehensive, structured guidance for testing Temporal workflows written in Python. It covers best practices for unit testing (using time-skipping), integration testing (mocking dependencies), and determinism validation through replay testing. Ideal for ensuring high code coverage and robust CI/CD pipelines for complex asynchronous workflows.

This guide details methods for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically targeting Microsoft Entra ID (Azure AD). It covers protection against access token theft, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Users can leverage Conditional Access and Token Protection features to cryptographically bind tokens to devices, significantly enhancing cloud identity security and preventing session hijacking.

A comprehensive skill for conducting authorized Bluetooth Low Energy (BLE) security assessments. It covers detecting various attacks, including sniffing, Man-in-the-Middle interception, replay attacks, and GATT enumeration abuse. The workflow guides users through packet capture using specialized sniffers (Ubertooth, nRF Sniffer), analyzing services and characteristics via Python/bleak, and performing cryptographic analysis using tools like crackle.

File-based persistent planning for multi-step AI agent tasks. Maintains task_plan.md, findings.md, and progress.md on disk; lifecycle hooks inject selected project planning context. Automatic retrieval only reads project planning files. session-catchup.py --metadata, when explicitly requested, can inspect local metadata of sessions from the same project; --replay can emit limited and framed excerpts with nonce. Optional gated mode can only request the host to continue if it supports this and never executes commands declared in Markdown. The skill has no network loading path. Use for researc...

Continuous file-based planning system for multi-step AI agents. Maintains task_plan.md, findings.md, and progress.md files on disk, injecting project-specific planning context into lifecycle hooks. Auto-restore reads project planning files only. Can explicitly check local agent session metadata with session-catchup.py --metadata, or issue limited nonce-framed excerpts with --replay. Optional controlled mode requests continuation only when supported by host, never executes declared Markdown commands. Does not include a data upload path over the network. Used for research or work requiring 5+...

A comprehensive guide detailing security best practices for integrating with ElevenLabs. It covers secure API key management using environment variables, implementing Git pre-commit hooks, and demonstrating robust webhook signature verification using HMAC-SHA256. This ensures secure data handling, replay protection, and proper voice data governance.

This comprehensive guide details the process of implementing a secure and robust system for handling Palantir Foundry webhook events. It covers key steps including API-based webhook registration, mandatory signature verification with replay protection, sophisticated event routing for various object lifecycles (create, update, delete), and ensuring idempotent processing using caching mechanisms like Redis. Use this when external microservices must react reliably and immediately to changes within the Foundry Ontology or data assets.