238 个 · 按相关度排序
Audit server-side advertising measurement by comparing browser and server events, checking duplicate handling, consent, and data quality. Reconcile platform diagnostics with source logs and business conversions, then return prioritized findings, owners, and verification steps.
中文简介正在准备中。当前显示英语简介。
Audit server-side paid-media measurement including server-side tag management, platform conversion APIs, event taxonomy, browser/server deduplication, consent, hashing, data quality, observability, and privacy. Use for server-side tracking, sGTM, server-side tagging, Meta CAPI, TikTok Events API, event_id, deduplication, pixel debugging, first-party measurement, or conversion data loss.
中文简介正在准备中。当前显示原文说明。
Audit server-side paid-media measurement including server-side tag management, platform conversion APIs, event taxonomy, browser/server deduplication, consent, hashing, data quality, observability, and privacy. Use for server-side tracking, sGTM, server-side tagging, CAPI, Events API, event_id, pixel debugging, first-party measurement, or conversion data loss.
中文简介正在准备中。当前显示原文说明。
Measure how Google Tag Manager affects page loading and rendering. Identify costly tags, triggers, and requests, then guide cleanup, asynchronous loading, or a move to server-side processing based on observed performance problems.
中文简介正在准备中。当前显示英语简介。
Trace server-side request forgery, where a server fetches a supplied URL, through internal services and metadata endpoints in a CTF sandbox. Document credential scope and distinguish successful token extraction from access actually accepted by another service.
中文简介正在准备中。当前显示英语简介。
Review Facebook and Instagram ads through a read-only audit of measurement, creative, audiences, placements, budgets, and account structure. Receive prioritized recommendations that account for missing evidence and distinguish account, Pixel, and conversion history.
中文简介正在准备中。当前显示英语简介。
Review TikTok Ads measurement, mobile video creative, audiences, commerce campaigns, bidding, and budgets. Receive prioritized recommendations with supporting evidence, missing information, and uncertainty clearly identified, while keeping the review read-only.
中文简介正在准备中。当前显示英语简介。
Implementing server-side tracking with privacy controls using Google Tag Manager server containers. Covers first-party data collection, IP anonymization, consent-aware event forwarding, and reducing client-side third-party cookie exposure.
中文简介正在准备中。当前显示原文说明。
用于设计和检查Node.js、Express、Next.js的API及数据处理，提供职责分离、数据库查询优化、缓存、身份验证、权限检查和后台处理的实现示例。
用于设计和审查Node.js、Express及Next.js的API与服务端数据处理，梳理业务逻辑、数据库查询、缓存、身份验证和错误处理。
Audit JavaScript page redirects, confirm their impact on loading time with performance measurements, and identify where server-side 301 or 302 redirects can replace them. Get specific findings and an explanation of loading and search indexing concerns.
中文简介正在准备中。当前显示英语简介。
Check HTML for meta refresh redirects that can interrupt reading and confuse users. Suggest server-side redirects or clear links users choose themselves, with guidance for checking the resulting behavior using accessibility tools or assistive technology.
中文简介正在准备中。当前显示英语简介。
Build server-side calling workflows in Java with Azure Communication Services. Implement automated phone menus, incoming and outgoing calls, transfers, recording, spoken prompts, and recognition of speech or keypad input, with examples for handling call events.
中文简介正在准备中。当前显示英语简介。
Develop Angular v20+ applications using Signals for reactive state and Standalone Components. Supports gradual migration from NgModules, Zoneless configuration, server-side rendering, hydration, and performance optimization with development testing before production use.
中文简介正在准备中。当前显示英语简介。
Add Markstream to AI chat or document interfaces to render Markdown as it arrives. The skill selects the framework package and configures dependencies, styles, streaming behavior, and server-side rendering boundaries.
中文简介正在准备中。当前显示英语简介。
Design and improve server-side applications using patterns for Node.js, Express, and Next.js API routes. Code examples cover API structure, database access, caching, authentication, error handling, and background jobs to guide implementation choices.
中文简介正在准备中。当前显示英语简介。
Add Stripe subscription billing to a Convex app using @convex-dev/stripe. Set up checkout, receive payment events through a signature-verified webhook, store subscription status, and check access to paid features using server-side subscription records.
中文简介正在准备中。当前显示英语简介。
Connect stock data to an application using Finnhub Stock API. The skill covers current quotes, company profiles, historical prices, and market news, with server-side request handling to protect API keys and manage cached responses.
中文简介正在准备中。当前显示英语简介。
Build TypeScript data services with optional query filters, typed results, and caching. Add a circuit breaker, a mechanism that pauses API calls after repeated failures, and keep API keys behind server-side proxy endpoints.
中文简介正在准备中。当前显示英语简介。
Assess server-side template injection, where user input is interpreted as template code. Identify template engines, evaluate information exposure and code execution risks, and organize evidence alongside detection and prevention measures.
中文简介正在准备中。当前显示英语简介。
Add, extend, or review OpenAI Ads conversion tracking for purchases, signups, and other confirmed outcomes. The skill covers browser Pixel events, server-side Conversions API events, duplicate-event prevention, secret handling, and local verification with a setup report.
中文简介正在准备中。当前显示英语简介。
Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty. Detection probes use double-curly and dollar-curly math expressions evaluated server-side. Once an engine is fingerprinted, escalate to RCE via the engine-specific class-walker, callback-registrar, or Execute-utility patterns documented in disclosed reports. Detection patterns: error messages reveal engine, blank or numeric eval reveals expression mode. Targets: email templates, PDF/report generators, CMS preview features, error pages with user input. Use when hunting RCE via template rendering, when content shows engine fingerprints, when finding endpoints that compose strings with user input before render.
中文简介正在准备中。当前显示原文说明。
Hunt CAPTCHA Bypass — 6 distinct patterns: (1) CAPTCHA field simply omitted from the request (server-side validation absent), (2) CAPTCHA token replayed from a solved challenge (no single-use enforcement), (3) CAPTCHA response accepted on a different endpoint than it was solved on (no binding to action/session), (4) static or predictable CAPTCHA values accepted (e.g. '0', 'null', empty string), (5) audio/accessibility CAPTCHA trivially solvable programmatically, (6) CAPTCHA only enforced after N failures (first N requests bypass it). Detection: intercept a successful form submission, remove the CAPTCHA field entirely, replay — if it still succeeds, server-side validation is absent. Medium severity standalone; High when it removes the only rate-limit gate protecting a login, registration, or payment endpoint.
中文简介正在准备中。当前显示原文说明。
SSTI playbook. Use when template expressions, server-side rendering, preview features, or templating engines may evaluate attacker-controlled content.
中文简介正在准备中。当前显示原文说明。