Results for “token”

Generates new design screens from text or images, edits existing screens with prompts and design tokens, and creates design variants using Stitch MCP, with prompt enhancement and asset downloading.

Scan codebase and git history for leaked secrets — API keys, tokens, passwords, private keys. Uses whispers-style regex patterns + gitleaks. Run as /leak-check before any git push. Alerts on Claude API keys, GitHub tokens, AWS credentials, and generic high-entropy strings.

Detect and exploit session fixation (WSTG-SESS-01, WSTG-SESS-03) and session exposure (WSTG-SESS-04) by testing whether the server issues a new session token post-authentication, whether pre-login tokens remain valid after login, and whether session IDs are transmitted over HTTP or included in GET parameters. Analyze token randomness via Burp Sequencer. Test JSESSIONID, ASP.NET Forms Auth cookies. Tools: OWASP ZAP, Burp Suite Repeater/Sequencer, JHijack.

Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement, with webhook alerting to Slack, Teams, email, or generic HTTP endpoints.

Explains Solana's architecture and protocol internals, covering the SVM execution engine, account model, consensus, transactions, validator economics, data layer, development tooling, and token extensions using Helius blog posts, SIMDs, and Agave/Firedancer source code.

Explains Solana's architecture and protocol internals, covering the SVM execution engine, account model, consensus, transactions, validator economics, data layer, development tooling, and token extensions using Helius blog posts, SIMDs, and Agave/Firedancer source code.

Analyzes an existing Vue project's UI to map components, extract design tokens, and identify code patterns, then generates a project-specific contextual skill file for consistent future development.

Set up the Discord channel — save the bot token and review access policy. Use when the user pastes a Discord bot token, asks to configure Discord, asks "how do I set this up" or "who can reach me," or wants to check channel status.

Apply-now consolidation of a drifted design system into one token/component SSOT. Use after an approved plan-uiux-unification pass, or when "clean up the design system now", "migrate to one button", or "resolve token conflicts". Plan-only burndown → plan-uiux-unification.

Set up the Discord channel — save the bot token and review access policy. Use when the user pastes a Discord bot token, asks to configure Discord, asks "how do I set this up" or "who can reach me," or wants to check channel status.

Tailwind CSS v4 principles. CSS-first configuration, container queries, modern patterns, design token architecture.

Expert en Web3 avancé (DeFi, DAOs, smart contracts, tokenomics, Layer 2, DZ regulations)

Expert en design system markdown specs (73+ design systems as markdown, tokens, components)

Audit authentication, token handling, PII protection, and anti-cheat in QuizVerse.

AI-powered crypto trading agent, wallet API, and LLM gateway via natural language. Use when the user wants to trade crypto, check portfolio balances (with PnL and NFTs), view token prices, search tokens, transfer crypto, manage NFTs, use leverage, bet on Polymarket, deploy tokens, set up automated trading, sign and submit raw transactions, or access LLM models through the Bankr LLM gateway funded by your Bankr wallet. Supports Base, Ethereum, Polygon, Solana, and Unichain.

Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass.

Documents Mistral AI's visual design system including sunset gradient color palette, typography pairing of PP Editorial Old with Inter, spacing tokens, and layout patterns across six page types.

飞书知识库：管理知识空间、空间成员和文档节点。创建和查询知识空间、查看和管理空间成员、管理节点层级结构、在知识库中组织文档和快捷方式。当用户需要在知识库中查找或创建文档、浏览知识空间结构、查看或管理空间成员、移动或复制节点时使用。当用户给出 doubao.com 的 /wiki/ URL/token 时，也应直接使用本 skill，不要因为域名不是飞书而回退到 WebFetch；路由依据是 URL 路径模式和 token，而不是域名。不负责：上传文件到知识库节点下（走 lark-drive）、编辑文档/表格/Base 内容（走 lark-doc / lark-sheets / lark-base）。

飞书知识库：管理知识空间、空间成员和文档节点。创建和查询知识空间、查看和管理空间成员、管理节点层级结构、在知识库中组织文档和快捷方式。当用户需要在知识库中查找或创建文档、浏览知识空间结构、查看或管理空间成员、移动或复制节点时使用。当用户给出 doubao.com 的 /wiki/ URL/token 时，也应直接使用本 skill，不要因为域名不是飞书而回退到 WebFetch；路由依据是 URL 路径模式和 token，而不是域名。不负责：上传文件到知识库节点下（走 lark-drive）、编辑文档/表格/Base 内容（走 lark-doc / lark-sheets / lark-base）。

Reduce OpenClaw token usage and API costs through smart model routing, heartbeat optimization, budget tracking, and native 2026.2.15 features (session pruning, bootstrap size limits, cache TTL alignment). Use when token costs are high, API rate limits are being hit, or hosting multiple agents at scale. The 4 executable scripts (context_optimizer, model_router, heartbeat_optimizer, token_tracker) are local-only — no network requests, no subprocess calls, no system modifications. Reference files (PROVIDERS.md, config-patches.json) document optional multi-provider strategies that require external API keys and network access if you choose to use them. See SECURITY.md for full breakdown.

Comprehensive expertise in blockchain game development, including play-to-earn (P2E) mechanics, play-to-own (P2O) models, in-game economies, NFT integration, dual token systems, and sustainable game tokenomics. Covers Unity/Unreal blockchain integration, anti-cheat considerations, and DeFi-gaming fusion. Use when "web3 game, blockchain game, play to earn, P2E, play to own, P2O, game economy, in-game tokens, gaming NFT, game items, metaverse, gamefi, skill-based gaming, gaming rewards, virtual economies, " mentioned.

Test JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kid parameter injection, and weak secret exploitation to achieve authentication bypass and privilege escalation.

Compresses AI agent output tokens by up to 65% using a terse, article-free communication style while preserving full technical accuracy. Supports multiple intensity levels and auto-disables for security warnings or ambiguous instructions.

High-performance toolkit for genomic interval analysis in Rust with Python bindings. Use when working with genomic regions, BED files, coverage tracks, overlap detection, tokenization for ML models, or fragment analysis in computational genomics and machine learning applications.

This skill should be used when the user asks about "my balance", "portfolio", "token holdings", "check balance", "how much do I have", "wallet balance", "what tokens do I own", "show my holdings", or any balance/portfolio query. Provides guidance on checking balances across chains.

Use when building UIs leveraging the WordPress Design System (WPDS) and its components, tokens, patterns, etc.

Process text with NLP. Use when tokenizing, analyzing sentiment, extracting entities, summarizing documents, or measuring similarity.

You have access to an environment variable, `GITLAB_TOKEN`, which allows you to interact with

Protect APIs from abuse and resource exhaustion by implementing rate limiting with token bucket, sliding window, and fixed window algorithms using Redis-backed counters, API gateway plugins, or application middleware.

Implement API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent DDoS, brute force, and credential stuffing attacks.

Connects to the MAXIA AI-to-AI marketplace on Solana to discover, buy, and sell AI services, earn USDC, and access crypto sentiment, DeFi yields, and token risk analysis via public APIs and MCP tools.

Composes final brand assets in Figma from generated images, applying text, brand tokens, layout, and grid. Optional layer: use when Figma is connected and an editable file is needed. Without Figma, delivers a composition specification.

Analyze Base EVM tokens via the deluagent oracle. Pass a contract address or cashtag to receive a flat decision header (action, conviction, entry/stop/size, read) and a full cognition report. Tiered x402 pricing with sequential calls required.

Comprehensive expertise in cross-chain infrastructure, including LayerZero, Wormhole, Axelar, and custom bridge implementations. Covers omnichain token standards, message passing, bridge security, and cross-chain application architecture. Use when "cross-chain, bridge, LayerZero, Wormhole, Axelar, omnichain, multi-chain, chain abstraction, cross-chain messaging, token bridge, " mentioned.

AI-era curl for agent web fetching, structure discovery, and deterministic structured extraction with token-budgeted output.

Syncs implemented UI to Figma as editable layers, Code Connect mappings, components, tokens, and handoff.