Skill UI

This guide provides a comprehensive workflow for configuring and managing Salesforce integrations across multiple environments, including Development, various Sandboxes (QA, Staging), and Production. It covers best practices for environment-specific credential handling, utilizing secrets managers (Vault, AWS/GCP), and establishing robust CI/CD deployment promotion flows using Salesforce CLI and code examples.

Master the deployment of applications connected to Snowflake across various cloud environments, including serverless functions (AWS Lambda, Cloud Run) and containers. This guide covers best practices for secure connection management, connection pooling, handling secrets (like private keys), and ensuring application reliability in production settings.

Configure secure and isolated Webflow integrations across development, staging, and production environments. This guide details how to manage separate API tokens, Site IDs, and secure secrets using industry-standard secret managers like HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager, ensuring data integrity and reliable deployment in a CI/CD pipeline.

This skill provides a comprehensive framework for customizing and managing AWS cloud infrastructure using Pulumi handlers and declarative components. Developers can configure regions, apply resource tags, manage OpenSearch, set up VPC networks, deploy custom domains, and implement advanced blue-green deployment strategies. It fully supports environment-conditional configuration, ensuring robust infrastructure deployment across dev, staging, and production environments.

A comprehensive guide for deploying, developing, and debugging Webiny serverless applications locally. Covers deployment using `yarn webiny deploy`, local watching for API and Admin components, managing various environments (dev, staging, prod), and troubleshooting infrastructure errors on AWS.

This guide details the standard project layout for Webiny applications. It explains the critical role of `webiny.config.tsx` as the single, central configuration point for registering all custom extensions. It covers various extension types, including API endpoints, Admin UI components, Infrastructure configuration (AWS), and CLI commands, helping developers understand where and how to integrate custom code.

This advanced code reviewer analyzes your codebase through the principles of 12 classic software engineering books (e.g., Clean Code, DDIA, Mythical Man-Month). It detects conceptual flaws, design smells, tight coupling, missing abstractions, and architectural risks—issues that standard linters and basic AI tools often miss. Essential for major refactoring and pre-design validation.

Logic Lens is an advanced AI skill that performs deep, formal logic-driven code review. Unlike standard linters, it analyzes code for complex issues like race conditions, security vulnerabilities (SQL injection, XSS), type safety flaws, and algorithmic errors across 9 critical risk categories. It is ideal for pre-merge PR reviews, auditing sensitive code paths, and refactoring complex business logic.

Methodology for assessing Bluetooth Classic BR/EDR targets, including device discovery, SDP service enumeration, profile abuse, legacy pairing weaknesses like KNOB, and BlueBorne-style flaws in older embedded, automotive, and accessory devices.

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

This router guides the testing of systemic flaws in business processes and state machines. It is essential when vulnerabilities stem from workflow abuse, race conditions, pricing flaws, or multi-step state attacks, rather than simple input sanitation issues. Use it to test complex business flows like payments, inventory management, and approval sequences.

This playbook is designed for advanced vulnerability assessment, covering flaws invisible to automated scanners. It guides testing for race conditions, complex workflow bypasses, state machine manipulation, financial parameter tampering (e.g., price/quantity manipulation), and coupon/credit abuse in multi-step applications. Essential for deep manual security testing.