Integrations & APIs

mahdtech Bundle

Test-driven development done red-green-refactor. Use when building a feature or fixing a bug test-first, writing integration tests, deciding what to test and where the test seams go, or avoiding brittle implementation-coupled tests. Covers what a good test is, the anti-patterns to avoid, and the rules of the red-green loop.

mahdtech Skill

Review branch changes for test gaps, logic edge cases, failure modes, and integration risks. Use when you want the changes on a branch probed for what breaks - untested paths, boundary conditions, race conditions, and integration hazards - before merging.

mahdtech Bundle

Expert guidance, API endpoints, SDK usage, OData filtering and sorting, namespace specifications, release updates, and troubleshooting for Nutanix v4 APIs (AOS 7.0+, Prism Central pc.2024.3+). Use when developing, integrating, or troubleshooting with Nutanix v4 REST APIs, Python/Go/Java/JavaScript v4 SDKs, OData parameters, or migrating off deprecated legacy Nutanix APIs (v1, v2, v3).

mahdtech Skill

Generate a manual test plan for a branch's changes - hands-on verification of real user flows and integration behaviour, not unit-test edge cases. Use when you want a copy-paste test plan a reviewer can run by hand before merging a PR.

bitranox Bundle

Use when creating, generating, editing, or validating a JSON file - package.json, tsconfig, plugin.json, VS Code settings, API fixtures, config - especially when modifying an existing file or producing one programmatically. Use instead of hand-typing JSON or editing it with sed/regex.

bitranox Bundle

Use when code depends on any external resource that can be absent, slow, flaky, rate-limited, or vanish mid-run - a network connection, remote service or HTTP/REST API, proxy, DNS name, database or connection pool, mount, disk space, CPU/memory headroom, or SSH/VNC session. Keywords - retry, backoff, jitter, timeout, health check, circuit breaker, graceful degradation, self-healing, pool eviction, rate limit, 429, connection reset, flaky, hang. For where resilience lives in a layered app see coding-python-clean-architecture; for library picks see coding-python-use-modern-libraries.

bitranox Bundle

Use when writing, reviewing, or pruning tests in ANY language - deciding unit vs integration vs e2e, whether to mock/patch or use the real dependency, which edge/adversarial inputs to cover (unusual UTF, emoji, CJK, binary, wrong types, oversized), why a test is flaky or order-dependent, or whether a test earns its keep. Keywords - mock, monkeypatch, spy, stub, fake, fixture, e2e, integration test, flaky, order-dependent, sleep, adversarial input, low-value test, coverage, pytest, vitest, jest, go test, cargo test, bats. For the red-green discipline see process-test-driven-development; for what to validate at a boundary see coding-input-sanitization.

fatih-developer Bundle

Analyzes commit history, PR descriptions, and spec changes to automatically generate developer-friendly API changelogs.

fatih-developer Bundle

Compares two OpenAPI/API specification versions (V1 vs V2) to detect breaking changes and backward compatibility issues.

fatih-developer Bundle

Architects which metrics to collect, how logs should be formatted, and how distributed tracing should be implemented across boundaries.

forgeyclap Skill

Forge playbook for contract-first APIs. Use for API, REST, GraphQL, gRPC, OpenAPI, endpoint, auth, JWT, versioning, rate limit, idempotency, contract test, backend.

forgeyclap Skill

Forge playbook for building and validating n8n automation workflows. Use for n8n, workflow, webhook, trigger, cron, retry, error branch, credentials, validate_workflow.

forgeyclap Skill

Forge playbook for chat bots — Discord, Slack, Telegram. Use for bot, slash command, webhook, signature verification, OAuth scopes, rate limit, dead-letter, interaction handler.

forgeyclap Skill

Forge playbook for payment/checkout/billing — Stripe, Mollie, Adyen, PayPal. Use for payment, checkout, subscription, refund, webhook signature, idempotency key, PCI, 3D Secure.

forgeyclap Skill

Forge playbook for SAFE, legal web scraping and data collection. Use for scrape, crawler, spider, harvest, extract data, API pull, lead list — public/permitted sources only.

forgeyclap Skill

Forge playbook for e-commerce and cashflow shops. Use for shop, store, cart, checkout, product, inventory, Shopify, WooCommerce, Etsy, Stripe, order fulfillment, oversell.

forgeyclap Skill

Forge playbook for business automation and API integrations — Gmail, Calendar, CRM, webhooks, Slack, payments. Use for integration, OAuth, sync, notification, automation.

afine907 Bundle

Privacy-respecting metasearch using your local SearXNG instance. Search the web, images, news, and more without external API dependencies.

afine907 Bundle

【API调试】API 调试实战指南，包含请求构造、响应分析、问题定位、性能诊断、安全测试。 触发时机： - 用户要求"调试API"、"测试接口" - API 返回异常需要排查 - 需要构造复杂请求 支持 curl/httpie/Postman/代码调试。

afine907 Bundle

【API Mock】设计和实现 API Mock 服务，支持前后端并行开发、测试环境模拟、延迟/错误注入。 触发时机： - 用户要求"Mock API"、"模拟接口" - 后端接口未就绪，前端需要开发 - 测试需要模拟各种响应场景 支持 Mock Server 搭建和代码级 Mock。

afine907 Bundle

【文档生成】从代码自动生成各类技术文档：API 文档、README、架构文档、变更日志、代码注释。 触发时机： - 用户要求"生成文档"、"写README"、"生成API文档" - 项目缺少文档需要补充 - 代码变更需要更新文档 支持多种文档格式和输出方式。

afine907 Bundle

【代码迁移】框架迁移、语言升级、API 版本迁移的技术方案和执行指南。 触发时机： - 用户要求"迁移代码"、"升级框架"、"Python 2到3" - 需要从旧框架迁移到新框架 - API 版本需要升级 提供迁移策略、步骤和验证方法。

afine907 Bundle

【GraphQL设计】设计 GraphQL Schema，包含类型定义、查询/变更设计、分页方案、错误处理、性能优化。 触发时机： - 用户要求"设计GraphQL API"、"GraphQL Schema" - 从 REST 迁移到 GraphQL - 需要优化 GraphQL 性能

envoydev Bundle

.NET gRPC conventions - the .proto is the contract and Grpc.Tools generates from it at build, host with Grpc.AspNetCore (AddGrpc + MapGrpcService), consume through typed clients (AddGrpcClient over IHttpClientFactory) with a reused multiplexing channel, the four call shapes with a deadline and CancellationToken on every one, JWT-bearer or mTLS auth, interceptors for cross-cutting work, the gRPC health protocol, and gRPC-Web for browsers. Floors at .NET 8 / C# 12. Load when defining, implementing, or calling a gRPC service, or weighing gRPC against REST. Companions: dotnet-web-backend, dotnet-authentication, csharp. Do NOT load for plain REST or minimal APIs - that is dotnet-minimal-api.

envoydev Bundle

.NET testing hub - the architecture-neutral approach for unit / integration / E2E tests, not a single library: AAA structure, a test strategy keyed off responsibility, coverage mechanics (the exclusion catalog + after-exclusions semantics; the % bar itself is user-set via project-test-coverage-analyzer), and runner / substitute / assertion library routing (xUnit, NSubstitute, FluentAssertions 7.x as defaults). Floors at .NET 8 / C# 12. Load before writing, modifying, or reviewing .NET tests, auditing test quality / smells, running mutation testing, or configuring coverage - do not rely on recall. Companions: csharp, dotnet-web-error-handling; Testcontainers, Aspire-orchestrated integration, and Verify/snapshot testing are folded in here as references/. Do NOT load for Angular/Jasmine/Karma/Jest (angular-testing) or plain TS/JS suites (ts-js-testing).

envoydev Skill

Decompile a compiled .NET assembly to read its real implementation - see how a framework or NuGet API actually works, view source you do not ship, or confirm behavior before a framework upgrade. Uses ilspycmd (via dnx or a pinned global tool). Load when you need ground truth from a .dll instead of guessing at an API, not for source you already have (that is serena / the LSP). Companions: `dotnet-migrate` (upgrade investigation), `csharp`.

envoydev Bundle

.NET web / HTTP service conventions - the architecture-neutral cross-cutting baseline every ASP.NET Core service shares: IHttpClientFactory, FluentValidation, resilience via Microsoft.Extensions.Http.Resilience, API versioning, OpenAPI, typed options with startup validation (IOptions / ValidateOnStart), observability (structured logging, OpenTelemetry to OTLP, correlation IDs, health checks), and caching (IMemoryCache, HybridCache, Redis). This is the web hub - load it first for any ASP.NET Core / Web API / minimal API / microservice work, then the focused companion for the how. It owns the 'pick exactly one architecture' rule but mandates no specific one. Floors at .NET 8 / C# 12. Do NOT load for console binaries, CLI tools, desktop apps, WPF/MAUI, daemons, or message-only consumers.

envoydev Bundle

Conventions for the console app's interface surface - what a .NET console binary IS to the outside world, on top of the generic host that runs it. Two shapes: a one-shot CLI tool (System.CommandLine 2.0 / Spectre.Console.Cli / Cocona, subcommands, exit codes) and a long-running gateway bot or consumer (Telegram.Bot, Discord.Net, SlackNet, CryptoExchange.Net, broker queue-workers) run inside a BackgroundService. Floors at .NET 8 / C# 12. Load when building a CLI tool, a chat or trading bot, or a bot's command surface, or when the user names System.CommandLine, Spectre.Console, Telegram.Bot, Discord.Net, or a bot. Companions: dotnet-hosted-services (host lifecycle + 24/7 hardening), dotnet-messaging, csharp, dotnet-testing. Do NOT load for the host lifecycle itself (dotnet-hosted-services), a web API or webhook endpoint (dotnet-web-backend), or a desktop GUI (dotnet-wpf).

jperezduerto Skill

Operate and interpret pspy — an unprivileged Linux process monitor that snoops /proc and inotify without requiring root. Use when conducting privilege escalation assessments, hunting cron jobs, catching credential leakage in process arguments, monitoring file system events, or identifying writable scripts executed by higher-privileged processes. Covers binary selection, execution flags, output interpretation, cron job detection, PrivEsc workflows, and integration with post-exploitation frameworks.

jperezduerto Skill

Build, extend, and operate Veil — a payload generation framework for antivirus evasion. Use when working with Veil-Evasion, when the user needs to generate AV-evading payloads, when creating shellcode stagers in Python, C, C#, Go, PowerShell, or Ruby, or when testing evasion efficacy against endpoint defenses. Covers installation, Veil-Evasion module usage, payload types, output formats, msfvenom shellcode integration, custom shellcode injection, compiler options, and evasion testing workflows.

jperezduerto Skill

Operate and tune Hydra (thc-hydra) — the fast, parallelized online password brute-forcing tool supporting 50+ protocols. Use when performing credential attacks against SSH, FTP, HTTP forms, RDP, SMB, MySQL, MSSQL, VNC, SNMP, LDAP, POP3, IMAP, SMTP, and more. Covers all major flags, http-form-post syntax, thread tuning, proxy routing, combo file usage, integration with CeWL/SecLists/crunch/Burp, and operational opsec considerations for authorized penetration testing engagements.

jperezduerto Skill

Build, extend, and operate Crunch — a wordlist generator for creating custom character-set and pattern-based wordlists for password attacks. Use when the user needs to generate wordlists by character set, length range, custom patterns, or permutations. Covers installation, character set syntax, built-in charset files, pattern mode with placeholders, output to file, piping to hashcat/john/hydra, compression options, output limiting, start and end string control, permutation mode, and integration with password cracking methodology.

jperezduerto Skill

Build, extend, and operate Autopsy — the open-source digital forensics platform built on The Sleuth Kit. Use when conducting DFIR investigations, analyzing disk images, performing file carving, keyword searching, email analysis, or building forensic case files. Use when the user asks about dead-box forensics, memory analysis integration, timeline analysis, hash verification, ingest modules, or generating forensic reports. Covers installation, case creation, data sources, ingest modules, analysis techniques, and investigation methodology.

jperezduerto Skill

Operate NetExec (nxc) — the successor to CrackMapExec maintained at Pennyw0rth/NetExec (4.2k+ stars). Use when enumerating and attacking Windows/AD environments via SMB, LDAP, WinRM, SSH, FTP, MSSQL, or RDP. Covers credential checking, pass-the-hash, Kerberos auth, share/user/group/session enumeration, remote command execution, the module system (lsassy, mimikatz, spider_plus, zerologon, procdump), BloodHound integration, and Active Directory password spray workflows for authorized penetration testing engagements.

jperezduerto Skill

Operate radare2 (r2) — an open source reverse engineering framework and binary analysis toolkit. Use when disassembling, debugging, or patching binaries, when the user asks about static analysis, dynamic analysis, ROP gadget hunting, shellcode analysis, binary diffing, CTF reversing challenges, or malware analysis. Covers r2 CLI, analysis commands, visual/graph mode, scripting with r2pipe, Cutter GUI, r2pm plugin manager, and integration workflows with Ghidra and GDB.

jperezduerto Skill

Build, extend, and operate tcpdump — the command-line packet analyzer for capturing and analyzing network traffic. Use when the user asks about tcpdump, packet capture, BPF filters, pcap files, network traffic analysis, protocol-specific filtering, rotating captures, remote capture over SSH, or integrating with Wireshark. Covers capture basics, all major flags, BPF filter syntax, output verbosity, ASCII/hex display, timestamp formats, rotating captures, common protocol filters, credential extraction patterns, attack analysis, and Wireshark integration.