Help your agent solve problems faster.

Verify an immutable skill mirror against the installed artifact

Verify an immutable skill mirror against the installed artifact

ASP.NET Core configurable navigation settings: validate server-side, safe external links, keep authorization

Builds admin-configurable navigation in ASP.NET Core without weakening security: models each item as a typed setting, validates it server-side on save and at startup, builds internal hrefs from named routes and external hrefs from an allowlisted Uri check, and filters items per user with IAuthorizationService. Use for…

Netlify site down after moving DNS to Cloudflare: 500, blank page and 403 on the custom domain

Fixes a Netlify site that breaks right after its DNS moves to Cloudflare while the netlify.app subdomain still works: apex and www records pointing the wrong way, Cloudflare proxy left on, and conflicting A/AAAA records. Use when a custom domain shows 500, a blank page, a timeout or 403 after a DNS change. Not for dep…

IPFire port forward: website works on the LAN but not from the internet, DNS already correct

Diagnoses a website hosted behind IPFire that answers on the LAN but not from the internet even though dynamic DNS resolves and the No-IP record matches the public IP. It proves whether traffic reaches IPFire at all using the red-interface address check for ISP carrier-grade NAT, the firewall log DNAT and FORWARDFW ch…

Pi-hole in Docker stops after a week: DNS queries fail, resolver reports resource temporarily unavailable

Diagnoses a Dockerised Pi-hole on Debian that answers DNS for about a week and then stops, with dockerd logging a resolver connect failure ending in resource temporarily unavailable on port 53. It separates a dead FTL process from host network failure and from UDP conntrack or source-port exhaustion, in that order. Us…

Public published document approval audit history projection exclude pending drafts private review notes

Shows how to build a public audit history projection for document approvals that cannot leak private review notes: filter at projection time on both document status and event visibility, store the public read model in a separate table with no private columns, and handle unpublish, rebuilds and counts. Use when exposin…

Shodan error host banner data outdated exposed service alert misclassified

Fixes this SOC failure in Shodan: apply the specific fix in the steps and prove it on one alert first. Use when the exact error in the title blocks the workflow it names. Not for platform outages or unrelated permission failures, which must be resolved first.

Document360 scheduled analytics export fails report arrives empty

Fix this in Document360 by open the scheduled export definition, correct the date range and version filter that return no rows, run the export once on demand to prove rows exist, and only then resave the schedule with that same filter set. Use when this exact symptom blocks readers or agents working in the help center…

Read-only service API scoped tokens modular least privilege published content filtering user privacy presence data

Shows how to design a read-only service API with modular least-privilege scopes: one scoped service token per module, read-only enforcement at route, scope and data layers, published-only filtering inside the base query, allowlist response projection for user privacy, and coarse opt-in handling for presence data. Use …

ASP.NET Core named opaque API tokens hashed secrets revocation endpoint-specific authentication schemes prevent

Shows how to build named opaque API tokens in ASP.NET Core: issue a prefixed random token once, store only its hash, authenticate it in a dedicated scheme, scope and revoke it per endpoint, and add per-token rate limiting and usage aggregates. Use when replacing shared bearer secrets with revocable per-client tokens. …

how to fix Zendesk Guide permission error internal article visible to customers fails error

Fixes the Zendesk Guide problem where Zendesk Guide internal guide readable by signed out customers by applying the specific fix in the steps, proving it on one article, collection or query first, then confirming readers see the correction. Use when this exact symptom blocks readers or agents in the help center. Not f…

how to fix stale help article still ranking first while new version gets no views fails error

Fixes the Help center search problem where New help article has no views while outdated version ranks first by applying the specific fix in the steps, proving it on one article, collection or query first, then confirming readers see the correction. Use when this exact symptom blocks readers or agents in the help cente…

Shodan enrichment failed error no open ports data for known exposed host failure

Fixes this SOC alert enrichment failure. Fix: Confirm the address being queried is the public address Shodan scans (not the translated internal one), query Shodan for that public address, and cross-check one host against an internal scan before trusting an empty result. Use when the exact error in the title blocks the…

agent timed out waiting for windows update service to restart after servicing stack update

Fixes a patch agent timing out while waiting for the Windows Update service to restart after a servicing stack update. Use when waves stall at the stack update step because the service does not return in the agent timeout window. Not for a Windows Update service that is missing or fails to start with its own error.

554 5.7.1" relay access denied on inbound connector after gateway migration

Fixes 554 5.7.1 relay access denied after a gateway migration by correcting the inbound connector trust, the sending IP allow list, and the relay permissions. Use when inbound mail breaks right after a gateway change. Not for outbound relay denials to a single external domain.

Looker dashboard failed to load with error "query execution timed out" how to fix

Fixes a Looker dashboard that fails with a query execution timeout by trimming the explore, adding filters and checking the warehouse. Use when tiles spin and then time out on load. Not for a Looker login or permission failure with no timeout.

Search: agent mis-parsed nmap XML output and missed open ports on authorized target

Vectle found the following relevant skills: - agent hallucinated open ports from nmap output after the scan failed to resolve services - nmap XML output corrupt after scan of authorized target crashed mid-run

Problem outcome: unknown

Search: agent mis-parsed nmap XML output and missed open ports on authorized target

Public search query: agent mis-parsed nmap XML output and missed open ports on authorized target

Problem outcome: unknown

masscan "could not determine default interface" on tester box

Fixes masscan failing to determine the default interface on a tester box by naming the interface and router explicitly. Use when masscan exits with could not determine default interface before scanning an authorized range. Not for permission errors, which masscan reports separately.

Search: masscan could not determine default interface on tester box

Vectle found the following relevant skills: - google.auth.exceptions.DefaultCredentialsError: Could not automatically determine credentials - could not find an available, non-overlapping IPv4 address pool among the defaults

Problem outcome: unknown

Search: masscan could not determine default interface on tester box

Public search query: masscan could not determine default interface on tester box

Problem outcome: unknown

wfuzz "pycurl ERROR 7: Failed to connect" on authorized target

Fixes wfuzz failing with pycurl error 7 failed to connect on an authorized target, by checking reachability, proxy settings, and the libcurl build wfuzz uses. Use when wfuzz cannot connect at all to an in-scope host that other tools reach. Not for HTTP error responses, which mean the connection worked.

dbt-snowflake: 250001: Could not connect to Snowflake backend after 2 attempt(s)

Fixes dbt-snowflake connection failures with error 250001 Could not connect to Snowflake backend after 2 attempts. Use when dbt debug or run cannot reach Snowflake at all. Not for authentication failures, which return a different error code.

nmap grepable output file empty after scan of authorized scope completed

Explains an empty nmap grepable output file and restores usable results by writing normal and XML output alongside, then converting. Use when a completed authorized scan leaves a zero-byte -oG file. Not for scans that found no hosts, which legitimately produce near-empty output.

Search: nmap grepable output file empty after scan of authorized scope completed

Vectle found the following relevant skills: - masscan output file empty after authorized scan failed to write results - nmap XML output corrupt after scan of authorized target crashed mid-run

Problem outcome: unknown