Skill UI

A comprehensive guide for auditing and ensuring regulatory compliance (SOC2, GDPR, HIPAA) when integrating Large Language Models (LLMs) via OpenRouter. It covers best practices for data handling, access control, PII redaction, implementing robust audit trails, and configuring provider routing to maintain data sovereignty and meet strict industry standards.

A comprehensive guide for integrating Plaid API into fintech applications. Covers secure link token creation, public token exchange for persistent access tokens, and real-time transaction synchronization using the /transactions/sync endpoint. Includes best practices for identity verification, ACH authentication, and webhook handling, ensuring robust financial data connectivity.

This guide provides comprehensive strategies for implementing privacy-safe analytics using PostHog. It addresses critical compliance requirements like GDPR and CCPA, covering explicit consent management (opt-in/opt-out), real-time property sanitization (stripping PII like IP or tokens), and methods for handling Data Subject Access Requests (SAR) and the Right to Erasure. Use this to build highly compliant and privacy-preserving analytics pipelines.

A senior specialist for building modern, production-grade React applications using React 19, Server Components, and Next.js App Router. Expertise includes implementing complex state management (Redux, Zustand), optimizing performance with memoization, handling data fetching with TanStack Query, and ensuring strict TypeScript typing and accessibility standards. Ideal for architecting large-scale frontend systems.

Comprehensive guide to managing data securely in Replit applications. This skill covers three core storage systems: PostgreSQL for structured data and complex queries; Replit KV Database for caching and session management; and Object Storage for file uploads and blobs. Learn best practices including parameterized queries, TTL implementation, and secure data access patterns.

This guide provides production-ready coding patterns for interacting with various built-in Replit services. It covers best practices for setting up singleton clients, implementing robust error handling, and creating type-safe wrappers for Key-Value Database, Object Storage, PostgreSQL, and Auth middleware. Ideal for developers building complex Replit integrations or establishing standardized data access layers.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

This skill provides a comprehensive guide to securing Supabase projects. It covers critical security measures, including proper separation of anonymous and service role keys, enforcing Row Level Security (RLS) on all tables, and hardening the API surface. Use this when setting up a new project, performing security audits, or implementing robust data access control policies.

This comprehensive guide outlines security best practices for utilizing Vast.ai's cloud environment. It covers secure API key management, hardening SSH access to GPU instances, implementing proper data cleanup before instance destruction, and adhering to robust network security protocols. Use this when setting up, auditing, or deploying sensitive AI/ML workloads on shared cloud hardware.

A comprehensive guide for developers on handling sensitive data and ensuring compliance with major privacy regulations like GDPR and CCPA when deploying serverless functions on Vercel. Learn techniques for PII redaction in logs, implementing data subject rights (Right to Access/Erasure), securing session cookies, and configuring data residency to meet global privacy standards.

This skill functions as a documentation architect, capable of generating highly structured wiki catalogues and comprehensive onboarding guides directly from a codebase. It scans the repository, detects architectural patterns, identifies technical layers (presentation, business logic, data access), and creates two distinct guides: a Principal-Level Guide for seniors and a Zero-to-Hero Path for newcomers, ensuring every detail is cited with specific file paths.