1.5K skills · sorted by relevance
Choose between REST, GraphQL, and tRPC based on who uses an API and how it is deployed. Define consistent responses, pagination, authentication, and versioning, supported by concrete request examples and failure cases.
Review the journey from discovering an API to receiving the first successful response. Identify delays in signup, authentication, setup, and documentation, then plan improvements using test environments, interactive examples, clearer errors, and measurements of progress.
Turn a system description into REST API endpoints, the URLs and operations applications use to exchange data. Choose an endpoint list or detailed specifications covering authentication, request fields, responses, error codes, and pagination for lists.
Guide authorized security assessments of REST, SOAP, and GraphQL APIs. Organize endpoint discovery, authentication checks, access control tests, and input testing, then document discovered weaknesses and evidence of unauthorized data access.
Review an API request against the supplied specification without sending it. Check the method, URL, headers, body, authentication format, and query parameters, then receive a brief verdict or a specific correction.
Build REST API endpoints, the routes applications use to exchange data, with input validation, authentication, access checks, error handling, and documentation. Covers creating, reading, updating, and deleting records, plus pagination and consistent response formats.
Create API specifications, interactive documentation, and developer portals that explain how to use an API. The skill also covers authentication examples, SDK generation, example testing, and migration guides to help developers integrate and maintain their applications.
Organize primary and backup administrators, two-factor authentication, shared logins, and access review dates for each system. Get a practical register design or request empty templates in CSV, SQL, JSON Schema, or a Notion property mapping.
Support authorized security assessments of Microsoft Active Directory with guidance on environment discovery, credential risks, authentication weaknesses, and privilege escalation. The material organizes tools and workflows for penetration testing and controlled training environments.
Build Python integrations with crypto exchanges using CCXT. Get guidance on fetching prices and order books, placing orders, checking balances, and receiving live updates, with examples for authentication, error handling, and synchronous or asynchronous code.
Integrate cryptocurrency exchanges into PHP applications with CCXT. Follow examples for market data, orders, authentication, and errors, with synchronous requests, ReactPHP asynchronous processing that avoids waiting on each request, and WebSocket connections for live updates.
Build cryptocurrency exchange integrations in TypeScript or JavaScript with CCXT. Get examples for fetching prices, placing orders, checking balances, and receiving live updates, alongside guidance on authentication, supported methods, and error handling.
Connect Claude Code plugins to external services through MCP, a protocol that makes service functions available as tools. Covers connection types, configuration files, authentication, tool permissions, and testing for local servers and hosted services.
Analyze WebSocket and SSE realtime connections in CTF sandboxes. Trace connection setup, authentication, subscriptions, and message sequences to explain changes in displayed or stored state and identify the smallest sequence that reproduces them.
Analyze Windows identity and host evidence in CTF sandboxes. Connect authentication tickets, credentials, mailbox rules, and host activity to explain which services accept access and how movement between hosts occurs.
Investigate web applications in a CTF sandbox by tracing real browser requests, stored state, API calls, and background jobs. Compare successful and failing flows to explain authentication, routing, and differences between interface and server behavior.
Assess Windows and Active Directory identity security within an authorized scope. Map accounts and permissions, investigate authentication and certificate weaknesses, and document paths that could allow an attacker to gain greater access.
Review suspicious emails for phishing and business email fraud by examining sender authentication, message content, links, and attachments. Organize indicators of compromise, which are traces of malicious activity, and recommend controls for the email environment.
Create or update API documentation from source code. The skill produces OpenAPI/Swagger specifications, descriptions of API operations, parameter and response references, authentication guidance, and practical examples for developers integrating an API.
Set up Python APIs with FastAPI using organized project templates. Build routes, asynchronous database operations, authentication, and error handling, with examples for sharing dependencies and testing endpoints through a separate test database.
Configure Linkerd to manage communication between services on Kubernetes. Covers installation, mutual authentication between services, access policies, gradual traffic shifts to new releases, retries, timeouts, and monitoring commands for inspecting traffic and diagnosing connection issues.
Plan and implement user login and access permissions using sessions, JWT tokens, or OAuth2. Apply role-based permissions, protect APIs, and review common weaknesses in password handling, cookies, token expiration, and server-side checks.
Diagnose missing recall, failed captures, and connection errors in the OpenViking memory plugin for Codex. Check installation, configuration, authentication, and server readiness, then use the findings to guide fixes and verify that memory works again.
Diagnose OpenViking memory problems by checking plugin installation, client settings, server connections, and recent activity. The skill helps trace missing recalled context, failed saves, and authentication errors, then guides targeted fixes and checks whether they worked.