Skill UI

A comprehensive guide to modern API design principles and architectural decision-making. Learn how to select the right pattern (REST, GraphQL, tRPC), implement robust versioning strategies, handle pagination, define standardized response formats, and incorporate essential security measures like authentication and rate limiting. Essential for building scalable and reliable backend services.

This SDK provides comprehensive Python tools for managing Azure API Management (APIM) resources programmatically. Users can automate the entire lifecycle, including creating and updating APIM services, importing APIs from OpenAPI specifications (JSON or URL), defining product tiers, managing subscriptions, applying granular security policies (like rate limiting), and configuring backends and users.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

Expert guide for designing robust, scalable, and resilient backend systems. Covers modern patterns including Microservices, Event Sourcing, CQRS, and advanced API contracts (REST, GraphQL, gRPC). Specializes in defining service boundaries, implementing distributed transactions (Saga), and integrating comprehensive security measures like OAuth 2.0 and mTLS.

This comprehensive skill covers the full scope of Firebase services, including Authentication, Firestore, Cloud Functions, and Hosting. It goes beyond basic implementation, focusing on critical architectural principles: adopting a query-first, denormalized NoSQL mindset. Key insights include mandatory security rule design, optimal data modeling for performance, and correctly utilizing modular SDKs to build scalable and secure backends.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

This comprehensive guide helps developers make critical architectural decisions in modern Node.js development. It covers framework selection (Fastify, Hono, Express), implementing layered architecture, mastering async patterns, robust error handling, and essential security protocols. The focus is on teaching architectural thinking and problem-solving skills, ensuring the development of scalable, high-performance, and maintainable backend APIs.

This skill enables the coordination of multiple specialized AI agents within a single session. It is designed for complex, multi-domain tasks such as comprehensive code reviews, security audits, or full-stack feature implementations. It coordinates expertise across various domains (backend, frontend, testing, architecture) to provide holistic analysis and actionable recommendations.

This skill implements a robust, multi-layered security hardening process based on the Defense-in-Depth strategy and DevSecOps principles. It coordinates specialized agents to perform comprehensive security assessments (SAST, DAST, SBOM, Threat Modeling), identify critical vulnerabilities, and execute layered remediation. The process covers application code, backend APIs, frontend components, and mobile platforms, ensuring a resilient security posture across the entire development lifecycle.

This collection provides 32 production-ready engineering skills covering core development, security, AI/ML, and specialized tools. It helps users identify the appropriate skill for tasks like architecture, frontend, backend, QA, DevOps, and cloud management. Each skill includes Python tools for analysis and scaffolding without external dependencies. Use specific SKILL.md files to load targeted capabilities efficiently.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.