用于设计和审查NestJS的API与服务,梳理按功能划分的代码结构、输入验证、身份认证、异常处理、环境配置和测试,支持面向实际运行的实现。
- 规划NestJS的API结构
- 实现输入验证与访问控制
- 审查异常处理和环境配置
1370 个 · 按相关度排序
用于设计和审查NestJS的API与服务,梳理按功能划分的代码结构、输入验证、身份认证、异常处理、环境配置和测试,支持面向实际运行的实现。
按先写测试的流程开发Go代码,支持多组用例、HTTP响应验证、性能基准测试、自动生成输入的模糊测试,以及查看测试执行范围的覆盖率检查。
Review HTTP Content-Type headers, which identify file formats, across web pages and static assets. Find mismatches that can block stylesheets or scripts, and identify server configuration changes needed to serve resources correctly.
中文简介正在准备中。当前显示英语简介。
Review a website’s Content Security Policy, which controls allowed resources, and identify unsafe HTML insertion. Guide policy changes and sanitization, then verify actual HTTP responses and browser behavior in a production-like environment.
中文简介正在准备中。当前显示英语简介。
Check external links for error responses and expired domains, then identify links to update or remove. Inspect rendered HTML and HTTP responses to locate affected pages and explain how to verify the corrections.
中文简介正在准备中。当前显示英语简介。
Manage WireMock from the command line to create mock HTTP responses, inspect and count received requests, change scenario states, and record real backend traffic. These operations support integration tests with controlled responses.
中文简介正在准备中。当前显示英语简介。
Build Helidon 4 applications on Java 21 or later with guidance for SE and MP. Apply practical patterns for HTTP endpoints, database access, configuration, testing, and security while accounting for API changes from Helidon 3.
中文简介正在准备中。当前显示英语简介。
Investigate failed Power Automate cloud flows through FlowStudio MCP. Inspect each action’s inputs and outputs, trace incorrect data upstream, fix expression or data issues, and replay a previous run to check the repair.
中文简介正在准备中。当前显示英语简介。
Helps build JavaScript and TypeScript projects with Bun, covering setup, package management, testing, and bundling code for distribution. It also guides migration from Node.js and use of Bun’s built-in APIs.
中文简介正在准备中。当前显示英语简介。
Run the cognee API server and optional interface on your own machine, check server health, connect SDK or HTTP clients, and configure authentication for personal development or use by multiple users.
中文简介正在准备中。当前显示英语简介。
Implement Zoom webhooks, HTTP notifications sent when events occur, such as meetings starting or recordings becoming available. Use reference guidance for event selection, subscriptions, signature verification, endpoint validation, delivery handling, and retries.
中文简介正在准备中。当前显示英语简介。
Generate PDF documents from JSON definitions with headings, tables, images, and page numbers. Use file, in-memory, or streaming output, and extend document layouts with custom components and externally managed application state.
中文简介正在准备中。当前显示英语简介。
Test and debug REST and GraphQL APIs using curl, httpie, Postman collections, or scripted tests. Check authentication, invalid inputs, pagination, and response details to identify failures that a successful status code alone may miss.
中文简介正在准备中。当前显示英语简介。
Prepare readable Markdown from HTTPS article pages using an optional external Defuddle cleaner. The workflow checks URLs, requires network consent and executable review, previews extracted content, and can retain the cleaned source separately from wiki ingestion.
中文简介正在准备中。当前显示英语简介。
Automate browser tasks through BrowserWing's HTTP API, from navigation and form filling to extracting search results. Inspect page structure to identify controls, capture screenshots, and run multiple actions in sequence.
中文简介正在准备中。当前显示英语简介。
Compare Bifrost HTTP API code with OpenAPI, its API specification, to find missing routes and mismatched methods, authentication, parameters, and responses. Get an audit report with code references and recommended fixes.
中文简介正在准备中。当前显示英语简介。
Coordinate with OpenRig agents on registered remote machines using SSH or HTTP connections. Select the intended host, inspect agent state, send messages, and interpret failures while checking whether remote actions actually took effect.
中文简介正在准备中。当前显示英语简介。
Add a complete dashboard panel in plain TypeScript, from server routes and data services to the visible component and registration. The workflow checks existing routing patterns and includes request failure handling, caching, and saved panel state.
中文简介正在准备中。当前显示英语简介。
Search HTTP traffic and security findings stored in Burp Suite project files from the command line. Filter response headers or bodies with text patterns, extract affected URLs, and review selected proxy history or site map data.
中文简介正在准备中。当前显示英语简介。
Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree on where one request ends and the next begins (Content-Length vs Transfer-Encoding header parsing inconsistency). CL.TE: front-end uses CL, back uses TE → smuggle by sending TE: chunked but with body that fits CL count. TE.CL: opposite. H2.CL: HTTP/2 downgrade, smuggle CL into HTTP/1.1 back-end. Detection tools: Burp HTTP Request Smuggler extension, smuggler.py, h2csmuggler. Confirm: time-delay technique (smuggled GET with 30s timeout) — if front-end returns slow on next victim request, smuggling works. Validate: cache poisoning chain (smuggle request that gets cached for victim), credential theft (smuggle X-Forwarded-For override that captures next user's cookies), bypass auth (smuggled internal-path request). Real paid examples from major CDN deployments. Use when hunting H1 paid programs running CDN+origin stacks, when targeting load balancer / WAF bypass.
中文简介正在准备中。当前显示原文说明。
Design, change, or review an HTTP/JSON API surface — endpoints, request/response shapes, authentication and authorization, pagination, idempotency, rate limits, versioning, and deprecations. Use when adding or modifying an HTTP endpoint, reviewing an OpenAPI spec or HTTP route diff, or deciding whether an HTTP API change breaks consumers. Do not use as a protocol-compatibility checklist for gRPC/protobuf, GraphQL, WebSockets, or other non-HTTP/JSON interfaces.
中文简介正在准备中。当前显示原文说明。
在 Skynet 框架下,仅使用 skynet.httpc 和 luasec 库编写 HTTPS 请求代码,避免使用 ltn12 或不存在的 API 接口。
中文简介正在准备中。当前显示原文说明。
Adds HTTP endpoints in convex/http.ts: webhook receivers with signature checks, REST style routes, CORS, auth headers, streaming responses, and file uploads over HTTP. Use when integrating Stripe, Clerk, Resend, or any service that calls back into the app, or when a client needs a plain HTTP API.
中文简介正在准备中。当前显示原文说明。
Testing Angular 18-21: TestBed, component harnesses (@angular/cdk/testing), Karma+Jasmine (default historical) vs Jest (jest-preset-angular, modern), Angular Testing Library (RTL-style). HttpClient mocking via HttpTestingController. NgRx Effects testing. Cypress / Playwright e2e. Use this skill to: - Detect runner (Karma+Jasmine vs Jest) and configure correctly. - Write component tests with TestBed. - Use component harnesses for Material / custom UI components. - Mock HttpClient via provideHttpClientTesting + HttpTestingController. - Test signal-based inputs with componentRef.setInput(). - Test NgRx Effects with provideMockActions. Do NOT use this skill for: - General Angular conventions (see angular-conventions). - Routing patterns broadly (see angular-routing — covers testing routes briefly). - Form patterns broadly (see angular-forms).
中文简介正在准备中。当前显示原文说明。