Skill UI

Estimates itemized closing costs for refinance quotes across 10 licensed states, covering lender, third-party, title, and recording fees while handling FHA Streamline refund netting and VA funding-fee exemptions for compliant borrower disclosures.

This skill provides a comprehensive guide to establishing SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers the architecture, prerequisites, and practical steps (including PowerShell scripting) required to achieve seamless Single Sign-On (SSO) and centralized authentication authority for hybrid environments and third-party SaaS applications.

This skill provides a comprehensive guide to deploying AWS Security Hub for centralized Cloud Security Posture Management (CSPM). It covers aggregating security findings from multiple sources (GuardDuty, Inspector, Macie, and third-party tools), enabling compliance checks against standards like CIS and PCI-DSS, and automating remediation workflows across multi-account AWS organizations. Ideal for security teams needing continuous compliance monitoring and robust governance.

This comprehensive guide details how to implement Single Sign-On (SSO) for Google Workspace using the SAML 2.0 protocol. It guides administrators through connecting a third-party Identity Provider (IdP) like Okta or Azure AD to centralize authentication, enforce MFA, and manage access policies across the organization.

Suricata is a high-performance, open-source network threat detection engine used for deep packet inspection. This skill details the deployment and configuration of Suricata in Intrusion Prevention System (IPS) mode. It covers setting up custom rules, integrating third-party rulesets (like Emerging Threats), and actively blocking malicious traffic in real time, making it essential for robust network security and compliance enforcement.

This tool performs a comprehensive review of OAuth 2.0 scopes, identifying over-permissioned third-party application integrations, excessive API scopes, and unused token grants. It is crucial for implementing the principle of least privilege across complex identity providers and SaaS ecosystems. Use cases include compliance auditing (GDPR, SOC 2), post-incident security reviews, and managing shadow IT risk by auditing cross-boundary consent grants.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

A comprehensive workflow for discovering, integrating, and utilizing third-party APIs and SDKs. This skill guides the process by first detecting the project language, ensuring necessary guidelines and skills are present, systematically fetching API details, and providing structured guidance on authentication, model usage, and endpoint implementation. It tracks integration progress by recording specific development milestones (e.g., SDK setup, first call made).

A comprehensive guide to setting up a fast, reproducible local development environment for BambooHR integrations. This workflow incorporates hot reloading, API mocking (using MSW), and robust unit/integration testing. It allows developers to establish a rapid, isolated, and stable iteration cycle for building or testing third-party HR platform connections.

A comprehensive guide to implementing secure integration practices for Linktree APIs. Covers critical topics including secure secret management, robust webhook signature verification (HMAC-SHA256), input sanitization against XSS, and data redaction of Personally Identifiable Information (PII). Essential for developing resilient and secure third-party integrations.

This tool functions as an expert competitive intelligence analyst. It takes a list of competitor URLs and generates comprehensive, structured profile documents. It combines live site scraping (e.g., features, pricing, value prop), SEO metrics, and third-party review data (G2, Capterra) to provide deep, actionable insights. Ideal for market research, product comparison, and strategic competitive planning.

This guide provides comprehensive methods for building robust change detection and event handling within Notion workspaces. It compares the reliability, complexity, and latency of three approaches: polling using last_edited_time, utilizing native webhooks, and using third-party connectors. Learn how to implement reliable, incremental synchronization, change feeds, and event-driven workflows using the Notion API to ensure data consistency and near real-time updates.