Skill UI

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

A comprehensive guide for developing custom external web service APIs for the Moodle Learning Management System (LMS). It covers Moodle's required API framework, coding standards, and the essential three-method pattern (execute_parameters, execute, execute_returns) necessary for integrating custom functionality, such as course management, quiz operations, and reporting, with external applications.

Guides developers through OAuth2 Flow Helper tasks within Security Fundamentals by providing best-practice instructions, generating production-ready code/configs, and validating outputs for authentication, validation, and secure coding.

Guides users through password hash generator tasks within the Security Fundamentals stack, outlining best practices, secure coding patterns, and validation checks tailored for authentication workflows.

Provides production-ready TypeScript and Python patterns for integrating the Perplexity SDK, covering singleton clients, safe error handling, retries, validation, and logging to enforce reliable team coding standards.

Automates Postgrid Verify workflows through Composio’s toolkit over Rube MCP, guiding you to discover tools, confirm active connections, and execute schema-compliant calls without hardcoding slugs.

Apply a rigorous coding standard by explicitly stating assumptions, avoiding unsupported claims, and covering both happy and unhappy paths before writing or reviewing code to ensure reliability.

Automates Scrape Do tasks through Composio’s Rube MCP, guiding users to discover tool schemas, validate connections, and execute workflows safely without hardcoding arguments.

Enforces a workflow that pauses development to research existing tools, libraries, or community solutions before writing custom code, using parallel searches and evaluation criteria to decide whether to adopt, extend, combine, or build.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Comprehensive checklist for application security hardening, covering input validation, output encoding, SQL/CSRF defenses, security headers, JWT best practices, secrets handling, rate limiting, and dependency audits to keep web services resilient.