Skill UI

This skill guides developers on integrating Okta as an external Identity Provider (IDP) for Webiny. It replaces default authentication methods (like Cognito) by utilizing the OpenID Connect (OIDC) standard. The process involves setting up an API configuration class to map Okta's JWT claims to Webiny identities, and creating a React extension component to wire the issuer URL, client ID, and configuration path, enabling seamless Single Sign-On (SSO) using Okta.

This skill performs comprehensive, feature-level integration validation after all associated development tasks are implemented. It goes beyond checking individual tasks to ensure cross-task consistency, full test suite passage, and complete specification coverage. It validates data flow, architectural adherence, and performs critical security scans for residual issues (e.g., TODOs, hardcoded secrets), providing a holistic GO/NO-GO assessment for deployment. Use this skill as a final quality gate to verify that the completed feature set respects the designed boundaries and dependencies end-...

Methodology for assessing Bluetooth Classic BR/EDR targets, including device discovery, SDP service enumeration, profile abuse, legacy pairing weaknesses like KNOB, and BlueBorne-style flaws in older embedded, automotive, and accessory devices.

Build a rogue Wi‑Fi access point that mimics or outcompetes a legitimate network to attract client devices. Useful for security assessments involving captive portals, client coercion, and traffic interception after association.

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.

This skill provides a comprehensive playbook for testing the security of SAML-based Single Sign-On (SSO) solutions. It focuses on validating assertion trust by checking signature coverage, audience and recipient restrictions, handling of Assertion Consumer Service (ACS), and identifying potential XML parsing weaknesses or IdP/SP confusion flaws. Use this when evaluating enterprise authentication systems for critical security vulnerabilities.

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

This tool facilitates an honest and rigorous retrospective on completed strategic decisions. It requires scoring the outcome against pre-committed success and kill criteria, auditing original assumptions, and revisiting dissenting opinions. Used at 90-day checkpoints or quarterly reviews to formalize lessons learned and close the strategic decision loop.

This tool automates the diagnosis of production errors tracked by Sentry. By leveraging the Composio CLI, it retrieves comprehensive issue details, full stack traces, breadcrumbs, and associated commits. It maps stack frames to local source code, allowing agents to propose fixes and triage issues directly, eliminating manual copy-pasting.

This skill performs comprehensive governance auditing of Fabric and Power BI tenant settings. It compares current configurations against a defined baseline, surfaces critical configuration drift, enumerates delegated overrides at capacity, domain, or workspace scope, and investigates associated Entra security groups. It provides grounded, actionable intelligence for complex governance decisions.

This tool guides users through the critical process of designing experiments *before* data collection. It helps select appropriate structures—such as factorial, crossover, or blocked designs—to ensure that collected data is interpretable and allows for robust causal inference. Use it when planning scientific studies, assigning subjects, or optimizing responses across multiple factors.

A dedicated tool for querying Lark Meeting Notes (Notes) details and raw verbatim transcripts. It requires an explicit note_id to function, allowing users to determine the display type, access associated document tokens, and retrieve the original unified transcript. It strictly focuses on note-based retrieval and does not handle searching by title, document body, or meeting ID.