Skill UI

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

Automates input validation checker guidance within the Security Fundamentals category, offering best practices, secure coding patterns, production-ready snippets, and output validation for common standards.

Automates guidance and code for identifying insecure deserialization flaws, following Security Fundamentals best practices to help with authentication, input validation, and secure coding checks when that phrase is mentioned.

Defines Java 17+ coding standards for Spring Boot services, covering naming, immutability, Optional usage, streams, exceptions, generics, project layout, and testing practices to ensure readable, maintainable code.

Automated license compliance scanner guidance for Security Fundamentals, delivering step-by-step practices, best-practice patterns, and production-ready code plus validation to keep authentication, validation, and secure coding efforts aligned.

This guide provides production-grade coding patterns for integrating Lokalise into TypeScript and Node.js applications. It covers crucial best practices such as client singleton implementation, robust cursor-based pagination for large datasets, structured error handling with retry logic, and efficient batch operations. Implementing these patterns ensures reliable, scalable, and maintainable API usage.

This guide provides production-ready patterns for integrating the Mistral AI SDK in both TypeScript and Python. It covers essential best practices such as singleton client management, handling structured JSON output, implementing streaming responses, concurrent asynchronous processing, and robust error handling with exponential backoff. Use this when establishing team coding standards or refactoring Mistral API usage.

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

This guide provides essential security protocols and coding best practices for integrating with OpenEvidence, a platform processing Protected Health Information (PHI). It covers mandatory topics such as HIPAA compliance, API key management, webhook signature verification, input validation, and data redaction, ensuring all interactions are secure and audit-compliant.

Guides users through password hash generator tasks within the Security Fundamentals stack, outlining best practices, secure coding patterns, and validation checks tailored for authentication workflows.

This guide provides production-ready coding patterns for interacting with various built-in Replit services. It covers best practices for setting up singleton clients, implementing robust error handling, and creating type-safe wrappers for Key-Value Database, Object Storage, PostgreSQL, and Auth middleware. Ideal for developers building complex Replit integrations or establishing standardized data access layers.