Skill UI

This guide provides comprehensive instructions for setting up and managing Sentry's enterprise-grade Role-Based Access Control (RBAC). It covers establishing the Organization-Team-Project hierarchy, integrating Single Sign-On (SSO) via SAML2, and automating user provisioning with SCIM. Use this when setting up large-scale organizations, enforcing granular team permissions, centralizing identity management, or ensuring regulatory compliance and audit logging.

This skill guides the mastery of smart contract security best practices for Solidity. It is essential for writing robust, secure, and efficient contracts, auditing existing code for common vulnerabilities (such as reentrancy, overflow, and access control issues), and implementing secure DeFi protocols. It focuses on preventing common attack vectors while optimizing gas usage.

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

This skill provides a comprehensive guide to securing Supabase projects. It covers critical security measures, including proper separation of anonymous and service role keys, enforcing Row Level Security (RLS) on all tables, and hardening the API surface. Use this when setting up a new project, performing security audits, or implementing robust data access control policies.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) and financial governance for cloud GPU environments. It allows organizations to allocate resources, set team-specific budgets, whitelist approved GPUs, and track spending via detailed audit logs. Ideal for multi-team research and engineering environments requiring strict cost accountability and access separation.

Configure Vercel's advanced role-based access control (RBAC) for enterprise environments. This guide covers setting up granular team roles, managing project-level access groups, integrating SAML SSO for secure authentication, and enabling detailed audit logging. Use this when implementing strict security protocols and enforcing the principle of least privilege across your team's deployments and resources.

This skill guides users through implementing comprehensive security measures for Vercel deployments. It covers best practices for secret management (using sensitive environment variables), configuring critical HTTP security headers (such as CSP and HSTS), protecting preview environments, and enforcing robust access control for API routes and deployment tokens.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

This comprehensive guide details how to control and audit the scope of code and data accessible by AI tools (like Codeium or Windsurf AI). Learn to implement robust data exclusion patterns, set compliance boundaries (e.g., HIPAA, GDPR), and configure secure deployment modes, ensuring sensitive data and secrets are never processed or retained by the AI model.

This guide provides a deep, investigation-driven methodology for reviewing Django and Django REST Framework (DRF) codebases. It helps identify critical authorization gaps, focusing on Insecure Direct Object References (IDOR) and object-level access failures. Learn how to trace data flows, analyze custom managers, and verify that users can only access resources they are explicitly authorized to view or modify.

A lightweight integration providing full read/write access to Google Slides presentations. This tool allows users to programmatically create, inspect, modify, and extract content (including text and tables) from Google Workspace documents. Perfect for local automation tasks requiring full control over presentation structure and content without needing a dedicated server.

This skill analyzes Active Directory (AD) Access Control Lists (ACLs) to detect dangerous misconfigurations. It uses the ldap3 Python library to query domain controllers, parse security descriptors (SDDL), and identify instances where non-privileged users or groups are granted dangerous permissions like GenericAll, WriteDACL, or WriteOwner on sensitive objects. Essential for security incident response and privilege escalation path discovery.