Skill UI

A comprehensive guide to integrating PayPal into applications, covering all aspects of the payment lifecycle. This skill covers client-side implementations using JavaScript SDK for Express Checkout, server-side API interactions (REST API) for order creation and capture, handling recurring billing via Subscriptions, managing asynchronous updates through IPN/Webhooks, and processing refunds and payouts. Ideal for building robust e-commerce payment gateways.

Provides a comprehensive workflow for managing feature flags, running A/B/multivariate experiments, and analyzing user cohorts using PostHog. The guide covers implementing flag evaluation both client-side (browser) and server-side (Node.js), and demonstrates how to programmatically set up, track, and query experiment results via API calls (cURL/Bash).

This skill guides the complete setup and configuration of PostHog SDKs for modern applications. It covers best practices for implementing client-side (browser) and server-side (Node.js/Python) event tracking. Users will learn how to install the necessary SDKs via npm or pip, manage environment variables for both Project API Keys and secure Personal API Keys, and initialize the tracking service correctly to ensure accurate and reliable event capture in PostHog.

A comprehensive guide to implementing production-ready patterns for PostHog analytics integration. This includes establishing singleton clients for both server-side (Python/Node) and client-side environments. It provides type-safe event capture utilities, React hooks for handling feature flags (including variants), and the full Next.js App Router setup for robust pageview tracking. Patterns are available for both TypeScript/JavaScript and Python environments.

A comprehensive optimization guide maintained by Vercel, covering 45 rules for React and Next.js. Use this resource when building new components, implementing complex data fetching (client or server-side), refactoring code, or systematically improving bundle size and overall load times for high-performance web applications.

A comprehensive guide to implementing expert customer data tracking across the entire stack. Includes best practices for client-side tracking using Analytics.js (React/Next.js), high-performance server-side tracking via Node.js webhooks, user identity resolution, and data governance strategies for Segment CDP.

Configure GDPR-compliant data handling, PII scrubbing, and data retention policies within Sentry. This skill provides detailed instructions on implementing client-side `beforeSend` hooks and server-side scrubbing rules to securely redact sensitive data (passwords, emails, IP addresses, CC numbers). Essential for achieving compliance with regulations like GDPR, HIPAA, and meeting SOC 2 audit controls.

A comprehensive guide to managing Sentry's event volume, quotas, and rate limits. Learn how to prevent 429 Too Many Requests errors and control costs by implementing client-side sampling (sampleRate/tracesSampleRate), using beforeSend filters to drop noisy errors, and understanding various quota types (Errors, Transactions, Replays). Essential for high-volume, cost-sensitive applications.

This comprehensive guide details how to harden Sentry's security posture and ensure compliance with regulations like GDPR. It covers best practices for managing sensitive data, implementing PII scrubbing, and configuring `beforeSend` hooks to automatically redact sensitive information such as passwords, API keys, tokens, IP addresses, and emails from client-side and server-side events.

This comprehensive guide provides step-by-step instructions for setting up a complete connection to a Supabase backend. It covers installing the necessary SDKs (for TypeScript and Python) and the CLI, securely configuring environment variables (URL, anon key, service role key), and initializing the client singleton for both client-side and server-side applications. Essential for new project development and authentication integration.

Assess web apps for client-side injection flaws, covering stored, reflected, and DOM XSS plus HTML injection, demonstrate session hijacking payloads, and guide validation and sanitization checks.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.