Loading...
Loading...
Found 59 Skills
Web vulnerability testing patterns for SQL injection, XSS, CSRF, LFI, SSTI, and file upload bypasses in CTF challenges. Trigger: When testing web applications, SQL injection, XSS, or file uploads.
使用 CreatiBI CLI（cbi）将本地文件上传到素材库，并在需要时完成首次配置初始化与 OAuth 登录。用户提到"上传到素材库""cbi 上传文件""repository file-create""先初始化 cbi""先登录再上传"等场景时使用；适用于图片、视频、文档等需要入库的本地文件上传任务。
Implement Syncfusion Blazor Input components including FileUpload, TextBox, NumericTextBox, TextArea, Signature, RangeSlider, OtpInput, Rating, InputMask, and ColorPicker. Use this when working with file uploads, text entry, numeric values, multi-line text inputs, signatures, ratings, or color selection. This skill covers input validation, events, data binding, and advanced customization options for all input-related components in Blazor applications.
Load PROACTIVELY when task involves connecting external services or third-party APIs. Use when user says "add email sending", "integrate a CMS", "set up file uploads", "add analytics", or "connect to S3". Covers email services (Resend, SendGrid), CMS platforms (Sanity, Contentful, Payload), file upload solutions (UploadThing, Cloudinary, S3), analytics integration, webhook handling, error recovery, and credential management.
Upload, edit, and export documents via Nudocs.ai. Use when creating shareable document links for collaborative editing, uploading markdown/docs to Nudocs for rich editing, or pulling back edited content. Triggers on "send to nudocs", "upload to nudocs", "edit in nudocs", "pull from nudocs", "get the nudocs link", "show my nudocs documents".
Отправка сообщений в каналы, беседы и личные чаты Пачки. Ответы в треды, загрузка файлов, кнопки, реакции, закрепление, прочтения. Используй когда нужно: отправить сообщение, ответить в тред, прикрепить файл, добавить реакцию, получить историю чата, закрепить сообщение. НЕ используй для: создания каналов (→ pachca-chats), управления ботами (→ pachca-bots).
Implement the Syncfusion React Uploader (UploaderComponent) for file upload scenarios. Use this when working with file uploads, drag-and-drop uploads, chunk or resumable uploads, file validation, or async upload configuration. This skill covers asyncSettings, preloaded files, upload templates, JWT-secured uploads, and form integration.
Эксперт по санитизации ввода. Используй для XSS prevention, encoding, validation и security headers.
素材管理操作。当用户请求上传图片、下载素材、管理飞书文档中的媒体文件时使用。
Insecure file upload playbook. Use when testing upload validation, storage paths, processing pipelines, preview behavior, overwrite risks, and upload-to-RCE chains.
Performs security audits and vulnerability assessments on Ruby on Rails application code. Use when reviewing Rails code for security risks, assessing authentication or authorization, auditing parameter handling, redirects, file uploads, secrets management, or checking for XSS, CSRF, SSRF, SQL injection, and other common vulnerabilities.