1.4K skills · sorted by relevance
Build or review NestJS backends with clear module boundaries, request validation, access controls, and consistent error handling. The skill guides TypeScript service structure, environment configuration, database integration, and testing for production use.
Helps build Go tests using a test-first workflow. Covers grouped test cases, HTTP response checks, performance benchmarks, fuzzing to explore generated inputs, and coverage reports showing which code was exercised by tests.
Review HTTP Content-Type headers, which identify file formats, across web pages and static assets. Find mismatches that can block stylesheets or scripts, and identify server configuration changes needed to serve resources correctly.
Check external links for error responses and expired domains, then identify links to update or remove. Inspect rendered HTML and HTTP responses to locate affected pages and explain how to verify the corrections.
Review a website’s Content Security Policy, which controls allowed resources, and identify unsafe HTML insertion. Guide policy changes and sanitization, then verify actual HTTP responses and browser behavior in a production-like environment.
Manage WireMock from the command line to create mock HTTP responses, inspect and count received requests, change scenario states, and record real backend traffic. These operations support integration tests with controlled responses.
Build Helidon 4 applications on Java 21 or later with guidance for SE and MP. Apply practical patterns for HTTP endpoints, database access, configuration, testing, and security while accounting for API changes from Helidon 3.
Investigate failed Power Automate cloud flows through FlowStudio MCP. Inspect each action’s inputs and outputs, trace incorrect data upstream, fix expression or data issues, and replay a previous run to check the repair.
Helps build JavaScript and TypeScript projects with Bun, covering setup, package management, testing, and bundling code for distribution. It also guides migration from Node.js and use of Bun’s built-in APIs.
Run the cognee API server and optional interface on your own machine, check server health, connect SDK or HTTP clients, and configure authentication for personal development or use by multiple users.
Implement Zoom webhooks, HTTP notifications sent when events occur, such as meetings starting or recordings becoming available. Use reference guidance for event selection, subscriptions, signature verification, endpoint validation, delivery handling, and retries.
Generate PDF documents from JSON definitions with headings, tables, images, and page numbers. Use file, in-memory, or streaming output, and extend document layouts with custom components and externally managed application state.
Test and debug REST and GraphQL APIs using curl, httpie, Postman collections, or scripted tests. Check authentication, invalid inputs, pagination, and response details to identify failures that a successful status code alone may miss.
Prepare readable Markdown from HTTPS article pages using an optional external Defuddle cleaner. The workflow checks URLs, requires network consent and executable review, previews extracted content, and can retain the cleaned source separately from wiki ingestion.
Automate browser tasks through BrowserWing's HTTP API, from navigation and form filling to extracting search results. Inspect page structure to identify controls, capture screenshots, and run multiple actions in sequence.
Compare Bifrost HTTP API code with OpenAPI, its API specification, to find missing routes and mismatched methods, authentication, parameters, and responses. Get an audit report with code references and recommended fixes.
Coordinate with OpenRig agents on registered remote machines using SSH or HTTP connections. Select the intended host, inspect agent state, send messages, and interpret failures while checking whether remote actions actually took effect.
Add a complete dashboard panel in plain TypeScript, from server routes and data services to the visible component and registration. The workflow checks existing routing patterns and includes request failure handling, caching, and saved panel state.
Search HTTP traffic and security findings stored in Burp Suite project files from the command line. Filter response headers or bodies with text patterns, extract affected URLs, and review selected proxy history or site map data.
Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree on where one request ends and the next begins (Content-Length vs Transfer-Encoding header parsing inconsistency). CL.TE: front-end uses CL, back uses TE → smuggle by sending TE: chunked but with body that fits CL count. TE.CL: opposite. H2.CL: HTTP/2 downgrade, smuggle CL into HTTP/1.1 back-end. Detection tools: Burp HTTP Request Smuggler extension, smuggler.py, h2csmuggler. Confirm: time-delay technique (smuggled GET with 30s timeout) — if front-end returns slow on next victim request, smuggling works. Validate: cache poisoning chain (smuggle request that gets cached for victim), credential theft (smuggle X-Forwarded-For override that captures next user's cookies), bypass auth (smuggled internal-path request). Real paid examples from major CDN deployments. Use when hunting H1 paid programs running CDN+origin stacks, when targeting load balancer / WAF bypass.
The English summary is being prepared. Showing the original description.
Design, change, or review an HTTP/JSON API surface — endpoints, request/response shapes, authentication and authorization, pagination, idempotency, rate limits, versioning, and deprecations. Use when adding or modifying an HTTP endpoint, reviewing an OpenAPI spec or HTTP route diff, or deciding whether an HTTP API change breaks consumers. Do not use as a protocol-compatibility checklist for gRPC/protobuf, GraphQL, WebSockets, or other non-HTTP/JSON interfaces.
The English summary is being prepared. Showing the original description.
在 Skynet 框架下，仅使用 skynet.httpc 和 luasec 库编写 HTTPS 请求代码，避免使用 ltn12 或不存在的 API 接口。
The English summary is being prepared. Showing the original description.
Adds HTTP endpoints in convex/http.ts: webhook receivers with signature checks, REST style routes, CORS, auth headers, streaming responses, and file uploads over HTTP. Use when integrating Stripe, Clerk, Resend, or any service that calls back into the app, or when a client needs a plain HTTP API.
The English summary is being prepared. Showing the original description.
Testing Angular 18-21: TestBed, component harnesses (@angular/cdk/testing), Karma+Jasmine (default historical) vs Jest (jest-preset-angular, modern), Angular Testing Library (RTL-style). HttpClient mocking via HttpTestingController. NgRx Effects testing. Cypress / Playwright e2e. Use this skill to: - Detect runner (Karma+Jasmine vs Jest) and configure correctly. - Write component tests with TestBed. - Use component harnesses for Material / custom UI components. - Mock HttpClient via provideHttpClientTesting + HttpTestingController. - Test signal-based inputs with componentRef.setInput(). - Test NgRx Effects with provideMockActions. Do NOT use this skill for: - General Angular conventions (see angular-conventions). - Routing patterns broadly (see angular-routing — covers testing routes briefly). - Form patterns broadly (see angular-forms).
The English summary is being prepared. Showing the original description.