Skill UI

This skill provides comprehensive guidance on implementing robust data governance and security guardrails within Snowflake. It covers advanced features such as network rules, mandatory authentication policies (MFA, Key Pair), session timeouts, and statement-level controls. Use this when enforcing strict security policies, achieving regulatory compliance, or structuring robust data access controls for a Snowflake environment.

This skill provides enterprise-grade Role-Based Access Control (RBAC) patterns specifically for Veeva Vault deployments in regulated environments. It guides developers on implementing advanced features while maintaining strict compliance standards. Key considerations include validating API changes against compliance requirements, utilizing VQL for efficient data retrieval, and managing security profiles for robust access control.

Provides an enterprise-grade framework for managing Webflow access control using OAuth 2.0 and scope-based Role-Based Access Control (RBAC). This system enforces the principle of least privilege by mapping specific user roles (e.g., Viewer, Editor, Admin) to granular Webflow scopes. Key features include per-site token isolation and robust permission checking middleware, significantly enhancing security for complex SaaS integrations.

A comprehensive solution for defining, registering, and checking administrative permissions in a structured manner. It utilizes a three-layer system: domain schemas for defining entities and scopes, injectable features for programmatic checking, and UI components/hooks for presentation. Ideal for building complex, multi-entity administrative interfaces with granular access control.

This guide details how to programmatically define, configure, and extend Headless CMS content models using the ModelFactory pattern. It covers defining various field types (text, richText, asset, ref, object, etc.), applying advanced validation rules, setting up layouts, and managing API access control. It is essential for developers building custom content structures in a robust, code-driven manner.

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

A comprehensive playbook covering advanced smart contract audit techniques for Solidity/EVM. Focuses on critical patterns like reentrancy (cross-contract), integer overflows, access control misuse, delegatecall exploits, flash loans, and advanced MEV/front-running attacks. Essential for securing DeFi protocols.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

A comprehensive guide to configuring and hardening SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end flow implementation, attribute mapping, advanced security controls like SHA-256 signatures and AES-256 encryption, and testing procedures for robust, enterprise-grade identity access management systems.

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

Use @expo/ui to build high-fidelity, native user interfaces across iOS and Android from a single React codebase. This library renders real native UI components, such as SwiftUI on iOS and Jetpack Compose on Android. It promotes a universal component layer for cross-platform consistency, while also providing controlled access to platform-specific optimizations and drop-in replacements for existing community libraries.