Skill UI

This guide teaches developers how to implement robust rate limiting and handle resource quotas for applications hosted on Replit. It covers monitoring Key-Value database usage, implementing middleware for API rate limiting (using Express), and utilizing exponential backoff and request queuing patterns to ensure application stability and prevent service degradation when hitting resource limits (e.g., 429 errors).

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

This skill provides comprehensive patterns for data handling and integration with Retell AI. It is designed for developers building advanced voice agents, automating phone calls, or working with complex telephony systems. The guide covers SDK usage, agent listing, and robust error handling, ensuring reliable implementation of voice AI applications.

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

Provides a comprehensive guide and framework for executing end-to-end (E2E) tests. It simulates real user interactions across the entire application stack, covering browser UI, API calls, and database operations. The guide details best practices like implementing the Page Object Model (POM), configuring multi-browser environments (Playwright, Cypress, Selenium), and establishing robust error handling mechanisms to ensure high application stability and quality.

A comprehensive tool for detecting critical API security vulnerabilities, including injection, broken authentication (BOLA), excessive data exposure, and mass assignment. It audits endpoints against the OWASP API Security Top 10 standards by analyzing source code, middleware chains, and request validation logic. Ideal for pre-deployment security gates, CI/CD integration, and compliance audits.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Provides comprehensive security review guidance for authentication, input handling, secrets, APIs, and payment-sensitive workflows, with actionable checklists covering secrets, validation, SQL injection, auth, XSS, CSRF, rate limits, and sensitive data handling.

A comprehensive toolset for the full backend development lifecycle. This suite enables developers to scaffold API routes from OpenAPI specifications, manage complex database migrations and optimization (PostgreSQL), and perform rigorous load/performance testing. It supports building robust microservices, securing REST APIs, and ensuring system scalability.

This comprehensive guide provides a phased strategy for migrating error tracking services from legacy tools like Rollbar, Bugsnag, or New Relic to Sentry. It covers crucial steps including concept mapping between diverse providers, implementing safe parallel reporting (dual-write), validating data parity via API comparison, and performing the final cutover to ensure continuous monitoring and zero downtime.

This comprehensive guide details how to harden Sentry's security posture and ensure compliance with regulations like GDPR. It covers best practices for managing sensitive data, implementing PII scrubbing, and configuring `beforeSend` hooks to automatically redact sensitive information such as passwords, API keys, tokens, IP addresses, and emails from client-side and server-side events.

Provides systematic steps for using Shodan’s web, CLI, and API tools to enumerate exposed hosts, services, and vulnerabilities during penetration tests, with guidance on filtering, scanning, and exporting data for follow-up analysis.