for▌

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.

Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers. Uses the Canarytokens API and custom webhook integrations for breach detection. Use when building deception-based early warning systems for intrusion detection.

Configures mutual TLS (mTLS) authentication between microservices using Python cryptography library for certificate generation and ssl module for TLS verification. Validates certificate chains, checks expiration, and audits mTLS deployment status. Use when implementing zero-trust service-to-service authentication.

Optimize content for AI search engines through citation architecture, E-E-A-T signals, and entity building. \n \n Guides content structuring for AI citation across ChatGPT, Perplexity, Claude, Gemini, and Google AI Overviews — focusing on extractability, quotability, authority, freshness, and entity clarity \n Provides AI Citation Scoring framework (5 dimensions, 20+ checklist items) and before/after examples showing how to transform weak content into citable statements \n Covers per-engine opti

Duplicate a Google Sheets template tab for a new month of tracking. \n \n Automates the three-step workflow: retrieve spreadsheet metadata, copy a template sheet, and rename the new tab with a month identifier \n Requires the gws-sheets skill and uses Google Sheets API commands for sheet operations \n Ideal for recurring monthly tracking workflows where a consistent template structure needs to be replicated with minimal manual effort \n

Automatically create GitHub issues for specification requirements not yet implemented in code. \n \n Analyzes specification files to extract all requirements, then checks codebase implementation status for each one \n Searches existing issues to prevent duplicates before creating new feature request issues \n Generates issues with requirement IDs, detailed descriptions, implementation guidance, and acceptance criteria \n Scans related specification files and code patterns to verify whether requi

Interactive CLI tools (vim, interactive git rebase, REPLs, etc.) cannot be controlled through standard bash because they require a real terminal. tmux provides detached sessions that can be controlled programmatically via send-keys and capture-pane.

Good interface writing is invisible. When words work seamlessly with design, people don't notice them.

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.

Search and discover paid API services available on the x402 bazaar marketplace. \n \n Query the marketplace using BM25 relevance search, list all available resources, or inspect specific endpoints to see pricing and payment requirements without paying \n Supports filtering by network (base, base-sepolia) and output formats (human-readable or JSON) \n Results are cached locally and auto-refresh every 12 hours; no authentication required for any search or discovery operation \n Use as a fallback w