Skill UI

This skill demonstrates the multi-model pattern for creating robust and clean API contracts using Pydantic. It guides the creation of separate models for creation requests (Create), updates (Update), responses (Response), and database documents (InDB), ensuring type safety and clear data validation for Python backends. It also covers best practices like handling camelCase aliases and optional fields.

An end-to-end workflow for building robust, production-ready Python backend APIs. This guide covers all stages, including project scaffolding, SQLAlchemy database integration, Pydantic validation, implementing JWT/OAuth2 authentication, comprehensive error handling, unit testing, and Docker deployment for modern microservices.

A comprehensive runbook for managing critical incidents within the Replit platform. It guides users through rapid triage (P1-P4 severity), diagnosing deployment crashes, database connection failures, and platform outages. Includes detailed steps for remediation, rollback procedures, and communication templates to restore service quickly and effectively.

This guide teaches developers how to implement robust rate limiting and handle resource quotas for applications hosted on Replit. It covers monitoring Key-Value database usage, implementing middleware for API rate limiting (using Express), and utilizing exponential backoff and request queuing patterns to ensure application stability and prevent service degradation when hitting resource limits (e.g., 429 errors).

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

This skill provides comprehensive patterns for data handling and integration with Retell AI. It is designed for developers building advanced voice agents, automating phone calls, or working with complex telephony systems. The guide covers SDK usage, agent listing, and robust error handling, ensuring reliable implementation of voice AI applications.

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

Provides a comprehensive guide and framework for executing end-to-end (E2E) tests. It simulates real user interactions across the entire application stack, covering browser UI, API calls, and database operations. The guide details best practices like implementing the Page Object Model (POM), configuring multi-browser environments (Playwright, Cypress, Selenium), and establishing robust error handling mechanisms to ensure high application stability and quality.

A comprehensive tool for detecting critical API security vulnerabilities, including injection, broken authentication (BOLA), excessive data exposure, and mass assignment. It audits endpoints against the OWASP API Security Top 10 standards by analyzing source code, middleware chains, and request validation logic. Ideal for pre-deployment security gates, CI/CD integration, and compliance audits.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Provides comprehensive security review guidance for authentication, input handling, secrets, APIs, and payment-sensitive workflows, with actionable checklists covering secrets, validation, SQL injection, auth, XSS, CSRF, rate limits, and sensitive data handling.

A comprehensive toolset for the full backend development lifecycle. This suite enables developers to scaffold API routes from OpenAPI specifications, manage complex database migrations and optimization (PostgreSQL), and perform rigorous load/performance testing. It supports building robust microservices, securing REST APIs, and ensuring system scalability.