Skill UI

This guide teaches comprehensive security hardening for API integrations. Learn best practices for credential management (using environment variables/secret managers), implementing git hooks to prevent secret leaks, robust input validation (using Zod), structured audit logging, and mandatory key rotation procedures, ensuring system compliance and operational security.

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

This skill provides comprehensive principles for developing multiplayer games, covering essential topics from networking architecture (Dedicated, P2P, Host-based) to advanced synchronization techniques. It details how to handle latency via prediction, interpolation, and lag compensation, optimize bandwidth using delta compression, and implement robust security measures like server authority and anti-cheat systems. Ideal for developers building real-time online experiences.

This comprehensive guide helps developers make critical architectural decisions in modern Node.js development. It covers framework selection (Fastify, Hono, Express), implementing layered architecture, mastering async patterns, robust error handling, and essential security protocols. The focus is on teaching architectural thinking and problem-solving skills, ensuring the development of scalable, high-performance, and maintainable backend APIs.

This skill enables the coordination of multiple specialized AI agents within a single session. It is designed for complex, multi-domain tasks such as comprehensive code reviews, security audits, or full-stack feature implementations. It coordinates expertise across various domains (backend, frontend, testing, architecture) to provide holistic analysis and actionable recommendations.

Guides users through password hash generator tasks within the Security Fundamentals stack, outlining best practices, secure coding patterns, and validation checks tailored for authentication workflows.

This skill guides best practices for achieving and maintaining PCI DSS compliance. It covers secure handling of cardholder data, network security best practices, tokenization techniques, and data minimization strategies, ensuring robust and compliant payment processing systems.

Automates PCI DSS validator work by guiding advanced security practitioners through best practices, generating production-ready code/configurations, and validating results against compliance frameworks.

A comprehensive specialist that combines automated static analysis (SonarQube, CodeQL, Semgrep) with advanced AI capabilities. This tool performs multi-layered code reviews assessing security vulnerabilities, performance bottlenecks, architectural coherence, and maintainability across various programming languages, integrating seamlessly into CI/CD pipelines.

A sophisticated AI tool that coordinates multiple specialized agents (e.g., Security, Architecture, Performance) to provide comprehensive, multi-perspective code assessments. It goes beyond single-point reviews by managing context, running hybrid execution workflows, resolving conflicts, and synthesizing unified, actionable reports for high-quality code assurance.

Automates vulnerability scans for applications and APIs via the security-test-scanner plugin, covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, and authorization weaknesses while generating detailed remediation reports.

This guide details how to implement Role-Based Access Control (RBAC) for Perplexity API in enterprise environments. Since Perplexity lacks native RBAC, the solution involves building a middleware gateway. This gateway enforces granular policies, including team-specific API key usage, model restriction (e.g., limiting access to 'sonar' only), budget caps, rate limiting, and mandatory search domain filtering for compliance and security.