Skill UI

This guide provides comprehensive documentation and code examples for integrating OpenEvidence webhooks. Learn how to subscribe to real-time events (e.g., query completion, evidence updates, new citations) to keep clinical decision support systems fresh. Use these webhooks to trigger downstream audit workflows and ensure immediate data synchronization.

A comprehensive guide for auditing and ensuring regulatory compliance (SOC2, GDPR, HIPAA) when integrating Large Language Models (LLMs) via OpenRouter. It covers best practices for data handling, access control, PII redaction, implementing robust audit trails, and configuring provider routing to maintain data sovereignty and meet strict industry standards.

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

This skill enables the coordination of multiple specialized AI agents within a single session. It is designed for complex, multi-domain tasks such as comprehensive code reviews, security audits, or full-stack feature implementations. It coordinates expertise across various domains (backend, frontend, testing, architecture) to provide holistic analysis and actionable recommendations.

This skill provides comprehensive guidance on achieving PCI DSS (Payment Card Industry Data Security Standard) compliance. It covers best practices for designing, implementing, and auditing secure payment processing systems, including network protection, data encryption, tokenization, and adhering to strict data minimization policies.

Run local Lighthouse audits via CLI or Node API, parse JSON/HTML reports, enforce performance budgets, integrate with CI (Actions/LHCI), and compare builds to catch regressions before deploys.

Conducts in-depth security audits across code, infrastructure, and configurations using the security-pro-pack toolkit to surface vulnerabilities, compliance gaps, and cryptographic weaknesses along with actionable remediation guidance.

Enables Claude to run a security-focused code review via the security-agent plugin, flagging SQL injection, XSS, authentication flaws, and unsafe dependencies with severity, location, impact, and remediation guidance for requested audits.

Automates Claude Code plugin audits whenever audit or security keywords appear, checking for vulnerabilities, compliance with CLAUDE.md standards, marketplace/MCP requirements, best practices, documentation, and repository hygiene before emitting a structured report.

This guide details implementing robust Role-Based Access Control (RBAC) within a PostHog Enterprise environment. It covers managing the three-level hierarchy (Organization > Project > Resource), assigning granular member roles (Owner, Admin, Member), configuring scoped API keys for secure integrations, and enforcing enterprise-grade authentication via SSO/SAML. Includes steps for setting up project permissions and auditing system changes.

A comprehensive guide for safely upgrading PostHog SDKs (for JavaScript and Node.js). This resource details critical breaking changes across major versions, such as the explicit requirement for `sendFeatureFlags` in v5.x and the new structured autocapture API for PostHog.js. It provides a structured, step-by-step procedure covering version auditing, code modification, testing, staging validation, and rollback plan.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.